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UTP Ce Cy iectm eee itd 
and perpetual Aotearoa New Zealand 
icon, the koru. 


The unfurling fern frond is representative of 
peace, tranquillity, growth, positive change 
and awakening. This dimension of peace is also 
inherent in the meaning of the living faith of Islam. 
We draw parallels between this taonga and the 
journey that New Zealanders have ahead of them 
to become a safer and more inclusive society. 


The koru design with seven groups of 
seven unfurling fronds also acknowledges that 
15 March 2019 was, according to the Islamic 
lunar calendar, 7 Rajab 1440, that is, the 
7th day of the 7th Islamic month. 
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Foreword 
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Penaloom nd na lawe ond tine dewitorr. 


We start by acknowledging whanau of the 51 shuhada, and the survivors and witnesses of 
the 15 March 2019 terrorist attack and their whanau whose lives have been forever changed. 
Those attacked at the masjidain were New Zealanders who had gathered together in peaceful 
prayer. The terrorist murdered 51 people and attempted to murder a further 40 people. 

His brutal actions were deplorable and incomprehensible. 


The terrorist attack was driven by an extreme right-wing IsLamophobic ideology. Its purpose 
was to promote chaos and disharmony in New Zealand. This purpose failed. In the days, 
weeks and months that followed, New Zealanders united around those affected and 

spoke out against racism, extremism and extremist violence. There was a period of 

national reflection about our shared values, our collective lives and what it means to live 

in New Zealand. 


The country needed to know what had happened, and why, and what should be done 
to reduce the risk of future attacks. This Royal Commission of Inquiry was established. 
It has been our privilege and honour to serve as Members. 


At the heart of our inquiry were those who lost their lives, whanau of the 51 shuhada, 
and the survivors and witnesses of the terrorist attack and their whanau. We wanted to 
listen and engage in a culturally appropriate way. 


We were humbled by those who generously welcomed us into their homes. People shared 
their grief and trauma as well as their love for New Zealand and their wish for better 

connections between all New Zealand communities. People whose lives had been turned 
upside down were nonetheless able to look to the future and be hopeful for New Zealand. 


We scrutinised the life of the individual who planned and carried out the terrorist attack. 
We asked hard questions of Public sector agencies, particularly those tasked with protecting 
New Zealanders from such attacks. 


We met with a wide range of New Zealand and international experts about topics ranging 
from gathering intelligence to social cohesion. Many hundreds of people met with us, wrote 
to us, provided evidence and were interviewed. More than 1,100 people made submissions. 


We are grateful to everyone who engaged with us so openly and honestly. We felt a genuine 
and heartfelt intention to assist this inquiry for the future benefit of all New Zealanders. 
This is especially true of the members of the Muslim Community Reference Group whose 
insights contributed greatly to our report. Likewise, we are grateful to JustCommunity 

and Navigate Your Way Trust, organisations that assisted us to engage with whanau of the 
51 shuhada, and the survivors and witnesses of the terrorist attack and their whanau. 


We thank the international experts and leaders of intelligence and security agencies in 
Australia, Norway, the United Kingdom and the United States of America who gave their time 
and valuable expertise so willingly. We reserve special thanks to Lord Hogan-Howe QPM 
and John McKinnon CNZM QSO who provided independent expertise and insights that were 
critical to our inquiry and this report. 


Finally, we express our gratitude to the secretariat of, and counsels assisting, the Royal 
Commission who brought their diverse views, skills and experience to bear on our work, 
ensuring a robust approach. 


We have made recommendations in this report that are both wide-ranging and detailed. 
They are the building blocks for a safer and more cohesive New Zealand. 


\ ~ i cou ane 


Hon Sir William Young KNZM Jacqui Caine 
Chair Member 
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Executive summary 


Ten days after the devastating attack of 15 March 2019, the Government announced 
that a Royal Commission of Inquiry, generally reserved for matters of the gravest public 
importance, would be established to investigate and report on what had happened. 


The terrorist attack was carried out by Brenton Harrison Tarrant, who has since been 
convicted of terrorism, the murder of 51 people and attempted murder of 40 people. 
He is now serving a sentence of life imprisonment without parole. We generally refer to 
him in our report as “the individual”. His name will not appear again. 


The Terms of Reference set by the Government directed us to investigate three broad 

areas - the actions of the individual, the actions of relevant Public sector agencies and any 
changes that could prevent such terrorist attacks in the future. This required a detailed, 
forensic examination of evidence. It also led us to expansive thinking about the systems and 
institutions set up to protect and connect New Zealanders. 


Our Terms of Reference required us to make findings on: 


4(a) whether there was any information provided or otherwise available to relevant 
[Public] sector agencies that could or should have alerted them to the terrorist 
attack and, if such information was provided or otherwise available, how the 
agencies responded to any such information, and whether that response was 
appropriate; and 


(b) the interaction amongst relevant [Public] sector agencies, including whether there 
was any failure in information sharing between the relevant agencies; and 


(c) whether relevant [Public] sector agencies failed to anticipate or plan for the terrorist 
attack due to an inappropriate concentration of counter-terrorism resources or 
priorities on other terrorism threats; and 


(d) whether any relevant [Public] sector agency failed to meet required standards or was 
otherwise at fault, whether in whole or in part; and 


(e) any other matters relevant to the purpose of the inquiry, to the extent necessary to 
provide a complete report. 


We saw the first four questions as directed primarily to whether Public sector agencies were 
at fault in respects relevant to the terrorist attack. 


We were also required to make recommendations for the future. 


At the heart of our inquiry were whanau of the 51shuhada, and the survivors and witnesses 
of the terrorist attack and their whanau. Connecting with Muslim communities was an 
expectation in our Terms of Reference, but it was also the right thing to do. We gained 
valuable insights in this way. 


From whanau of the 51 shuhada, and the survivors and witnesses of the terrorist attack 

and their whanau we heard about the ongoing impacts of the terrorist attack, including 
challenges in obtaining government support. Through broader engagement with Muslim 
communities we learned about frustrations with the Public sector that go back many years. 
Muslim communities talked candidly about racism, discrimination and experiences of being 
suspected of being, or treated as, terrorists as well as their fear of being the targets of hate 
speech, hate crime and terrorism. 


Communities we spoke with wanted to see greater social cohesion and told us about their 
wish for closer community connections to help all people feel safe and welcome. Social 
cohesion has direct benefits including people leading happy, rewarding and participatory 
lives, with increased productivity. Importantly, it also means that people are less likely 
to become radicalised towards extremist and violent behaviours, including terrorism. 


There was strong public concern that the individual was granted a firearms licence. 

A large proportion of submissions we received came from firearms owners with suggestions 
to strengthen the firearms licensing process, introduce measures to better track large 
purchases of firearms and ammunition and obligations to report concerning behaviour. 
Many felt that banning military style semi-automatic firearms unnecessarily penalised 
responsible firearms owners, preferring improvements to the licensing system instead. 


Part 4: The terrorist is the result of our extensive inquiries into the life of the individual, 

his background and particularly his planning and preparation for the terrorist attack. We 
understand some people may prefer not to read about him, but we had a duty to report on 
what influenced his extreme views, why he chose New Zealand for a terrorist attack and 
how he avoided coming to the attention of Public sector agencies. 


The individual is a white Australian male who was 28 years old in March 2019. He displayed 
racist behaviour from a young age. His life experiences appear to have fuelled resentment 
and he became radicalised, forming extreme right-wing views about people he considered a 
threat. Eventually, he mobilised to violence. 


The individual arrived in New Zealand on 17 August 2017. As an Australian, he was entitled to 
live in New Zealand. Within a few days of arrival, he moved to Dunedin and from this time, 
his life was largely devoted to planning and preparing for the terrorist attack. We looked at 
his use of online platforms before and during the terrorist attack. We also examined how the 
individual obtained a firearms licence and how he was then legally able to acquire firearms 
and ammunition. We tracked how he trained for the terrorist attack by developing firearms 
expertise and working out at a gym and taking steroids to bulk up. 
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The individual had no close friends and largely avoided social situations and, in that sense, 
he was socially isolated. He was financially independent and widely travelled. In his 
preparation and planning for his terrorist attack, he was methodical and single-minded. 

The individual could present well and conduct himself in a way that did not attract suspicion. 
He was not identified as someone who posed a threat. We expand on the reasons for this in 
the report. 


As we explain in detail in Part 4: The terrorist, we are satisfied that the individual acted alone. 
We look closely at firearms in Part 5: The firearms licence. 


Despite the individual having almost no history in New Zealand, his application for a firearms 
licence was approved within about three months of his arrival in the country. He had named 
his sister as a referee but, because she lived in Australia, firearms licensing staff asked for a 
replacement referee. In the end two New Zealand-based referees (an adult and their parent) 
described as “friends” of the individual, vouched for him as a “fit and proper” person. 

The adult (whom we refer to as “gaming friend”) had played online games with the 

individual over ten years but had been physically in his company for only approximately 

21 days in that entire decade. Gaming friend’s parent had spent only approximately 

seven days in the individual’s presence over four years. In both cases, time spent with the 
individual was sporadic. 


We conclude that during the firearms licence application process, insufficient attention 

was given to whether gaming friend and their parent knew the individual well enough to be 
appropriate referees. We discuss what might have happened if the application had not been 
approved at that time or perhaps had been handled differently. 


We find that New Zealand Police’s administration of the firearms licensing system did not meet 
required standards. The reasons for this include a lack of guidance and training for licensing 
staff and incomplete guidance for dealing with applications where nominated referees cannot 
be interviewed in person. 


For contextual relevance, as amendments to firearms legislation are not within our scope, 

we discuss the regulation of semi-automatic firearms. It was lax, open to easy exploitation 
and was gamed by the individual. The risk that highly lethal weapons might be used ina 
terrorist attack in New Zealand had been recognised on a number of occasions. One warning 
followed a terrorist attack conducted in Oslo and on Utgya Island in Norway in 2011, in which 
a semi-automatic rifle was used. 


We examine in detail what was known by Public sector agencies about the individual before 
the terrorist attack in Part 6: What Public sector agencies knew about the terrorist. We put 
detailed questions to 217 agencies in the wider Public sector and found that ten agencies held 
information that we are satisfied relates to the individual. 
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The only information that directly referred to the terrorist attack was an email the individual 
sent to the Parliamentary Service (as well as politicians, media outlets and individual 
journalists) just eight minutes before the terrorist attack began. The critical information 
about the attack (in terms of the location) was within a 74 page manifesto attached to and 
linked within the email. It took some minutes for the Parliamentary Service to open the 
email, read and make sense of the manifesto and then pass the details on to New Zealand 
Police. By then the terrorist attack had just started. We explore this in detail in Part 6: What 
Public sector agencies knew about the terrorist and we are satisfied that the Parliamentary 
Service followed correct procedures and acted promptly. 


Other information known about the individual was largely unremarkable. With the benefit 
of hindsight, we can see that some did relate to the individual’s planning and preparation. 
That, however, was not apparent at the time as this information was fragmentary. No single 
aspect of it could have alerted Public sector agencies to an impending terrorist attack. 
Public sector agencies involved in the counter-terrorism effort are not set up to collect and 
aggregate information like medical and firearms licensing records. We discuss this in 

Part 6: What Public sector agencies knew about the terrorist. 


In Part 7: Detecting a potential terrorist, we discuss the challenges of detecting and 
disrupting terrorists. Terrorist attacks by lone actors are difficult for intelligence and security 
and law enforcement agencies to detect and stop. Despite this, many intended lone actor 
terrorist attacks have in fact been disrupted. In this Part we use the individual as a case 
study to test and explain some of the issues at play before we move on to look more closely 
at countering terrorism. 


The counter-terrorism effort (which forms a subset of the broader national security 
system) is reviewed in Part 8: Assessing the counter-terrorism effort. The Public sector 
agencies involved in the counter-terrorism effort include the National Security Group of the 
Department of the Prime Minister and Cabinet, the Government Communications Security 
Bureau, Immigration New Zealand, New Zealand Customs Service, New Zealand Police and 
the New Zealand Security Intelligence Service. 


The most pointed of the questions we have been asked to address about the 
counter-terrorism effort is whether relevant Public sector agencies failed to anticipate or 
plan for the terrorist attack because of an inappropriate concentration of counter-terrorism 
resources or priorities on other terrorism threats. This question is not susceptible to an 
easy answer, but we work through the issues methodically. 
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There is a context that must be recognised. The intelligence and security agencies have 
comparatively little social licence. For this and other reasons that we explore, the Public 
sector agencies involved in the counter-terrorism effort had limited capability and capacity - 
far less than many believe. The idea that intelligence and security agencies engage in mass 
surveillance of New Zealanders is a myth. Looking back to 2014, the intelligence and security 
agencies were in a fragile state. A rebuilding exercise did not get underway until mid-2016 
and was still unfinished when the terrorist attack took place in 2019. 


Our assessment has focused primarily on the period between 2016 and 15 March 2019. 

During that time the primary, but not exclusive, focus of the counter-terrorism resources 

was on what was seen as the presenting threat of Islamist extremist terrorism. It is important 
to note that counter-terrorism agencies did follow up leads relating to possible right-wing 
extremist terrorism. So, the concentration on the threat of Islamist extremist terrorism was 
not to the exclusion of addressing other leads when they arose. 


In 2016, the New Zealand Security Intelligence Service identified that establishing a baseline 
picture (an understanding) of other emerging terrorism threats was a goal, but one it would 
pursue only when they had the capacity to do so. This work eventually began in May 2018, 
with one of the projects focused on developing an understanding of right-wing extremism 

in New Zealand. At that time, the New Zealand Security Intelligence Service had only a 
limited understanding of right-wing extremism in New Zealand and work on this was not 
complete when the terrorist attack occurred. 


The intelligence function of New Zealand Police had degraded and from 2015 was not carrying 
out strategic terrorism threat assessments. 


We conclude there was an inappropriate concentration of counter-terrorism resources on 
the threat of Islamist extremist terrorism, but the reasons for this require some teasing out. 


Our concern with the focus of counter-terrorism resources on Islamist extremist terrorism 
is one of process. There are two aspects to this. First, there had been no substantial 
assessments of other potential threats of terrorism. So, the concentration of 
counter-terrorism resources was not based on a comparative risk analysis. Second, 
there had been no informed system-wide decision to proceed on this basis. By this we 
mean a decision made by all relevant Public sector agencies with the knowledge that 
there were other potential threats of terrorism that were not well understood. This also 
requires brief explanation. 
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The New Zealand Security Intelligence Service had decided to concentrate its scarce 
counter-terrorism resources on the presenting threat of Islamist extremist terrorism. 

This was in part because it had a lack of capacity until mid-2018 both to deal with that 

threat and, at the same time, to baseline other threats. Other Public sector agencies 
involved in the counter-terrorism effort did not engage in informed discussion about this 
approach and its implications, including the unmitigated risks. So there was not an informed 
and system wide decision to proceed on this basis which we see as inappropriate. 


All of that said, we find that the concentration of resources on the threat of Islamist extremist 
terrorism is not why the individual’s planning and preparation for his terrorist attack was 

not detected. Given the operational security that the individual maintained, the legislative 
authorising environment in which the counter-terrorism effort operates and the limited 
capability and capacity of the counter-terrorism agencies, there was no plausible way he 
could have been detected except by chance. Despite the concerns we have just discussed 
and other systemic issues we have reviewed in Part 8: Assessing the counter-terrorism effort, 
the fact the individual was not detected was not in itself an intelligence failure. 


We have looked more broadly at the counter-terrorism effort. We have already mentioned 
limited social licence, capability and capacity. By the middle of the last decade, the subjects 
of counter-terrorism, intelligence and security had become politically and publicly toxic. 
There was little political ownership. Public sector leadership was fragmented through 

a decentralised national security system with the Public sector agencies involved in the 
counter-terrorism effort acting in ways that were only loosely coordinated. 


As discussed, rebuilding the capacity and capability of the intelligence and security agencies 
began in mid-2016. Although progress has been made, significantly more is required. 

As well, systemic change is needed, including the creation of a national intelligence and 
security agency. This will deliver a more systematic approach to counter-terrorism and 
countering violent extremism efforts. The chief executive of the new agency will be the 
national adviser on intelligence and security, with the agency having the advantage of 
focusing solely on intelligence and security issues. It will provide comprehensive strategic 
policy advice, develop a counter-terrorism strategy and administer relevant national security 
legislation. The agency will assume responsibility for the development of intelligence 
assessments, underpinned by horizon scanning, and be responsible for the design of the 
performance management framework and monitor progress against it. 


We acknowledge that while our focus has been on the counter-terrorism effort our key 
recommendations are for system-wide change, which relates to all threats and intelligence 
issues. It is impractical to carve out counter-terrorism responsibilities. 


This and other detailed recommendations are set out in Part 10: Recommendations. 
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Full implementation of our recommendations will result in a better organised 
counter-terrorism effort with enhanced capacity and capability and a less restrictive 
legislative framework. We expect to see far more political and public engagement 
and discussion and stronger oversight. This will result in greater public trust and 
thus social licence. We wish to see discussion about counter-terrorism normalised. 
Our recommendations provide mechanisms for this to occur. 


The absence of such discussion to date has had consequences. 


Since 2015, successive governments have been reluctant to proceed with a public-facing 
counter-terrorism strategy. One reason for this was to avoid stigmatising Muslim 
communities further. But, had such a strategy been shared with the public and also 
incorporated a “see something, say something” policy, it is possible that aspects of the 
individual’s planning and preparation may have been reported to counter-terrorism agencies. 
With the benefit of hindsight, such reporting would have provided the best chance of 
disrupting the terrorist attack. A public-facing counter-terrorism strategy would also 

be likely to have included policies to make crowded places safer and to protect possible 
targets from attack. Implementation of such policies may well have reduced the loss of 
life on15 March 2019. As well, if the known risk that a terrorist could take advantage of 
New Zealand’s lax regulation of semi-automatic firearms had been addressed earlier, it is 
likely that there would have been no terrorist attack on 15 March 2019. 


The final set of issues we consider are how social cohesion, inclusion and diversity have 
been approached in New Zealand in Part 9: Social cohesion and embracing diversity. 


Social cohesion, inclusion and diversity were not on our original work plan. But, as our 
inquiry progressed and our engagement with communities deepened, it became clear that 
these issues also warranted consideration. Social cohesion has many direct benefits to 
individuals and communities. In contrast, societies that are polarised around political, 
social, cultural, environmental, economic, ethnic or religious differences will more likely 
see radicalising ideologies develop and flourish. Efforts to build social cohesion, inclusion 
and diversity can contribute to preventing or countering extremism. In addition, having 

a society that is cohesive, inclusive and embraces diversity is a good in itself. 


We considered how Public sector agencies, local government, the private sector, civil 
society and communities can and should support a more cohesive society. Public sector 
efforts have been fragmented and frustrating for the community groups who have engaged 
with them. A public conversation about social cohesion has been notably absent. 

Once again, we conclude systemic change is needed and we set out our thinking in 

Part 10: Recommendations. 
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This report contains 44 recommendations which cover five key areas relating to the 
counter-terrorism effort, the firearms licensing system, the ongoing needs of those most 
affected by the terrorist attack, New Zealand’s response to our increasingly diverse 
population and implementing our recommendations. These are explained in detail in 
Part 10: Recommendations. 


There are some recurring themes and issues that weighed heavily as we considered our 
recommendations. The most important of these is the need to confront and engage openly 
with hard issues. In the course of our inquiry we have looked at Public sector activities 
involving the firearms licensing system, the counter-terrorism effort and social cohesion and 
embracing diversity. Each of these has been characterised by limited political ownership and 
an absence of public discussion. 


The looseness of controls on semi-automatic firearms had been appreciated for decades 
and the risk that a terrorist could take advantage of this was identified as long ago as 2011. 
But there was no significant tightening of the regime largely because of strong opposition 
from the firearms community. 


Media controversy and generally low levels of public trust and confidence in the 
intelligence and security agencies and aspects of the work of the law enforcement 
agencies have meant that politicians have avoided the challenge of public engagement 
about countering-terrorism. 


Building social cohesion, inclusion and embracing diversity are goals that we can all 

aspire to. In a COVID-19 response and recovery environment where there is increased 
stress, growing mental health and addiction issues and an economic downturn, potential 
inequalities and vulnerabilities are magnified. As the country looks ahead there is an 
opportunity to build and enhance our social infrastructure and community resilience in the 
same way that physical infrastructure is being invested in. There is a strong case for further 
cross-government actions to improve social cohesion and how we embrace diversity. 


We accept political engagement on these issues will not be easy. But facing up to the hard 
issues and having open public conversations are critical. We have already discussed the 
consequences of not promoting a public-facing counter-terrorism strategy and not tightening 
loose controls on firearms before the terrorist attack. We hope our report will encourage 
members of the public, officials and politicians to engage in frank debate so that everyone 
understands their roles and responsibilities in keeping New Zealand safe, secure and 
cohesive. There is impetus for debate about the kind of country New Zealand aspires to be. 


Finally, New Zealand will never be immune from violent extremism and terrorism. Even with 
the best systems in the world, a determined would-be terrorist could carry out an attack in 
New Zealand in the future. But there is much that government can do, starting with a greater 
commitment to transparency and openness with New Zealanders. We all have a part to play 
in building common agreement about the values we share and want to uphold as a society 
and for our future generations. 
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Consolidated findings 


Our Terms of Reference required us to make findings as to: 


4(a) 


(b) 


(c) 


(d) 


(e) 


whether there was any information provided or otherwise available to relevant 
[Public] sector agencies that could or should have alerted them to the terrorist 
attack and, if such information was provided or otherwise available, how the 
agencies responded to any such information, and whether that response was 
appropriate; and 


the interaction amongst relevant [Public] sector agencies, including whether there 
was any failure in information sharing between the relevant agencies; and 


whether relevant [Public] sector agencies failed to anticipate or plan for the 
terrorist attack due to an inappropriate concentration of counter-terrorism 
resources or priorities on other terrorism threats; and 


whether any relevant [Public] sector agency failed to meet required standards or 
was otherwise at fault, whether in whole or in part; and 


any other matters relevant to the purpose of the inquiry, to the extent necessary to 
provide a complete report. 


What Public sector agencies knew about the terrorist 


Part 6: What Public sector agencies knew about the terrorist sets out the evidence and 
rationale for our findings. 


“The terrorist attack” means the terrorist attack carried out by the individual in accordance 
with his planning and preparation over the previous years. 


We find that: 


a) The only information about the individual that was known by New Zealand Public sector 


agencies before 15 March 2019 that could or should have alerted them to the terrorist 
attack was the email sent by the individual to the Parliamentary Service just after 


1.32pm on 15 March 2019. 


b) The Parliamentary Service acted appropriately within a period of time that was 


reasonable in the circumstances in response to the email the individual sent just 
before the terrorist attack. 


c) There was no other information provided or otherwise available to any relevant 


Public sector agency that could or should have alerted them to the terrorist attack. 


d) There was no failure in information sharing between the relevant Public sector agencies. 


Assessing the counter-terrorism effort 


Part 8: Assessing the counter-terrorism effort sets out the evidence and rationale for our 
findings. 


We conclude that the concentration of counter-terrorism resources on the threat of Islamist 
extremist terrorism before the New Zealand Security Intelligence Service’s baselining project 
began in May 2018 was inappropriate because it: 


a) was not based on an informed assessment of the threats of terrorism associated with 
other ideologies; and 


b) did not result from a system-wide decision that, despite the absence of such an 
assessment, counter-terrorism resources should continue to be allocated almost 
exclusively to the threat of Islamist extremist terrorism. 


We find that: 


a) The inappropriate concentration of resources on the threat of Islamist extremist 
terrorism did not contribute to the individual’s planning and preparation for his terrorist 
attack not being detected. And for that reason, the Public sector agencies involved in 
the counter-terrorism effort did not fail to anticipate or plan for the terrorist attack due 
to an inappropriate concentration of counter-terrorism resources. 


b) No Public sector agency involved in the counter-terrorism effort failed to meet required 
standards or was otherwise at fault in respects that were material to the individual's 
planning and preparation for his terrorist attack not being detected. 


The firearms licence 


Part 5: The firearms licence sets out the evidence and rationale for our findings. 


We find that: 


a) NewdZealand Police failed to meet required standards in the administration of the 
firearms licensing system in that: 


i) the Arms Manual, the Master Vetting Guide and the Firearms Licence Vetting Guide 
did not provide coherent and complete guidance as to the processing of applications 
where the applicant could not provide a near-relative referee able to be interviewed 
in person; 


ii) New Zealand Police did not put in place arrangements to ensure that firearms 
licensing staff received systematic training and regular reviews of their practice; and 


iil) in dealing with the individual’s firearms licence application, New Zealand Police 
did not adequately address whether gaming friend and their parent knew the 
individual well enough to serve as referees. 
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Summary of recommendations 


Our Terms of Reference directed us to make any recommendations we considered 
appropriate on the following: 


5(1)(a) whether there is any improvement to information gathering, sharing, and analysis 
practices by relevant [Public] sector agencies that could have prevented the 
terrorist attack, or could prevent such terrorist attacks in the future, including, 
but not limited to, the timeliness, adequacy, effectiveness, and co-ordination of 
information disclosure, sharing, or matching between relevant [Public] sector 
agencies; and 


(b) what changes, if any, should be implemented to improve relevant [Public] sector 
agency systems, or operational practices, to ensure the prevention of such 
terrorist attacks in the future; and 


(c) any other matters relevant to the above, to the extent necessary to provide a 
complete report. 


Our recommendations are set out in Part 10: Recommendations and address the 
following areas: 


a) Improving New Zealand’s counter-terrorism effort. 
b) Improving New Zealand’s firearms licensing system. 


c) Supporting the ongoing recovery needs of affected whanau, survivors and witnesses 
of the 15 March 2019 terrorist attack. 


d) Improving New Zealand’s response to our increasingly diverse population. 
e) Implementation of the recommendations. 
The recommendations are organised by four themes. 


Strong government leadership and direction are required to provide effective oversight 
and accountability of the counter-terrorism effort. This will ensure that roles and 
responsibilities are well understood across Reduction, Readiness, Response and Recovery 
at the national, regional and local levels and resources are appropriately focused. 


Strong government leadership and direction are also required to position New Zealand 
(and in particular the Public sector) to respond and adapt to New Zealand’s increasingly 
diverse population and to effect the social shift that over time will help to achieve a safe 
and inclusive New Zealand. 
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Engaged and accountable government decision-making will enable Public sector policies, 
programmes and services to be designed and delivered that meet the requirements of 

New Zealand’s increasingly diverse society. The Public sector (and in particular the agencies 
involved in the counter-terrorism effort) needs to change how it engages with communities. 
The Public sector mindset must shift to value communities’ input into decisions, 
transparency and engaging in robust debate. 


Everyone in society has a role in making New Zealand safe and inclusive but there is no 
common understanding of what those roles are, how they relate to each other and what they 
should be seeking to achieve. Clarity of roles and responsibilities is critical. 


To ensure that everyone is aware of their role in making New Zealand safe and inclusive, the 
government (and the Public sector agencies involved in the counter-terrorism effort) will 
have to ensure that New Zealand’s counter-terrorism effort is valued by the people it seeks to 
protect. Enhancing public trust and confidence in New Zealand’s counter-terrorism effort will 
take time, so work to do so should begin urgently. As well, the government must understand 
what New Zealand’s changing demographics mean for New Zealand as a society and promote 
consistent messages about the benefits of diversity and an inclusive society. 


Underpinning all of this, New Zealand needs fit for purpose laws and policies. This 
extends to ensuring the Intelligence and Security Act 2017 and Terrorism Suppression 
Act 2002 are both fit for purpose, providing for hate crime offences, creating a workable 
approach to hate speech and encouraging the better recording of reports of hate crime. 
Also important is the need for New Zealand Police to improve their administration of the 
firearms licensing system. 


22 


Recommendations to improve New Zealand’s 
counter-terrorism effort 





We recommend that the Government: 


1. Ensure a minister is given responsibility and accountability to lead and coordinate the 
counter-terrorism effort. 


2. Establish a new national intelligence and security agency that is well-resourced 
and legislatively mandated to be responsible for strategic intelligence and security 
leadership functions including: 


a) achief executive who is designated as the intelligence and security adviser to the 
prime minister and to Cabinet and chairing the Security and Intelligence Board or 
the potential new governance body (Recommendation 3); 


b) operating as the sector lead and coordinator for strategic intelligence and 
security issues; 


c) developing a counter-terrorism strategy that includes countering violent 
extremism (Recommendation 4); 


d) providing strategic policy advice to the responsible minister(s) on intelligence and 
security issues; 


e) intelligence assessment and horizon scanning supported by deep expertise; 


f) leading the engagement with communities, civil society, local government and the 
private sector on strategic intelligence and security issues; 


g) ensuring the counter-terrorism effort conforms to New Zealand’s domestic and 
international human rights obligations; 


h) leveraging the emergency management structures at the local and regional levels; 
i) system performance monitoring and reporting; and 


Jj) accountability to the minister for the performance of the counter-terrorism effort 
(Recommendation 1). 
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3. 


Investigate alternative mechanisms to the voluntary nature of the Security and 
Intelligence Board including the establishment of an Interdepartmental Executive 
Board as provided for by the Public Service Act 2020 to, amongst other things: 


a) align and coordinate the work, planning and budgets across relevant 
Public sector agencies addressing all intelligence and security issues; 


b) report to the Cabinet External Relations and Security Committee, including on 
current and emerging risks and threats, on a quarterly basis; 


c) inrelation to the counter-terrorism effort: 


i) recommend to Cabinet the strategy for addressing extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism 
and terrorism developed by the national intelligence and security agency 
(Recommendation 4); and 


ii) ensure the activities to implement the strategy for addressing extremism 
and preventing, detecting and responding to current and emerging threats of 
violent extremism and terrorism are identified, coordinated and monitored. 


Develop and implement a public-facing strategy that addresses extremism and 
preventing, detecting and responding to current and emerging threats of violent 
extremism and terrorism that: 


a) is led by the new national intelligence and security agency (Recommendation 2); 


b) is developed in collaboration with communities, civil society, local government 
and the private sector; 


c) sets the purpose and the direction of the strategy, with goals, milestones and 
performance measures; 


d) sets priorities for the counter-terrorism effort across Reduction, Readiness, 
Response and Recovery; 


e) defines roles and responsibilities for Public sector agencies, communities, civil 
society, local government and the private sector to implement the strategy across 
Reduction, Readiness, Response and Recovery; 


f) has oversight from the responsible minister (Recommendation 1); and 


g) is reviewed within three years of publication in collaboration with Public sector 
agencies, communities, civil society, local government, the private sector and the 
Advisory Group on Counter-terrorism (Recommendation 7). 
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Amend the Public Finance Act 1989 to require the intelligence and security agencies 
to provide performance information that can be the subject of performance audit by 
the Auditor-General. 


Strengthen the role of the Parliamentary Intelligence and Security Committee so 
that it can provide better and informed cross-parliamentary oversight of the national 
security system (including the counter-terrorism effort) and priority setting, and 
members can access sensitive information as necessary for such oversight. 


Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to establish an Advisory Group on Counter-terrorism: 


a) responsible for providing advice to the national intelligence and security 
agency and the Security and Intelligence Board or its replacement 
(Recommendations 2 and 3); and 


b) with functions to be established in legislation, as soon as practicable, but without 
delaying its establishment. 


Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to include in advice on the National Security and Intelligence 
Priorities and in the annual threatscape report (Recommendation17), a summary of 
the advice provided in the preceding year by the Advisory Group on Counter-terrorism 
(Recommendation 7) and the actions that have been taken in response to that advice. 


Direct the new national intelligence and security agency (Recommendation 2), and in 
the interim the Department of the Prime Minister and Cabinet, to improve intelligence 
and security information sharing practices, including: 


a) driving a change in approach to the “need-to-know” principle across relevant 
Public sector agencies, with special attention given to local government including 
the emergency management structures at the local and regional level, to ensure it 
enables rather than just restricts information sharing; and 


b) overseeing the implementation, within six months, of recommendations in the 
2018 Review of the New Zealand Security Classification System: 


i) expanding the classification system principles to provide that no information 
may remain classified indefinitely and that, where there is doubt as to the 
classification level, information is classified at the lower level; 


ii) revising and strengthening Public sector agency guidance and developing 
training; 
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iil) adopting a topic-based approach to systematic declassification of historic 
records; and 


iv) developing indicators of function and performance of the classification system. 


10. Amend the Intelligence and Security Act 2017 with respect to direct access 
agreements, to require the new national intelligence and security agency, and in 
the interim the Department of the Prime Minister and Cabinet, to regularly report to 
the responsible minister for the counter-terrorism effort on their establishment and 
implementation. 


11. Direct chief executives of Public sector agencies involved in the counter-terrorism 
effort to consider whether an appropriate number of their employees have security 
clearances and ensure that those staff have appropriate access to facilities and 
information management and technology systems to be able to review relevant 
material as required. 


12. Develop and promote an accessible reporting system that enables members of the 
public to easily and safely report concerning behaviours or incidents to a single 
contact point within government. 


Develop and publish indicators and risk factors that illustrate for the public specific 
behaviours that may demonstrate a person’s potential for engaging in violent 
extremism and terrorism and update them regularly as the threatscape evolves. 
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Establish a programme to fund independent New Zealand-specific research on 
the causes of, and measures to prevent, violent extremism and terrorism with the 
following provisions: 
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a) the national intelligence and security agency (Recommendation 2) should be 
provided with a multi-year appropriation for research funding; 


b) research priorities and grant recipients should be selected by a panel 
comprising officials from the new national intelligence and security agency 
(Recommendation 2) and representatives from the Advisory Group on 
Counter-terrorism (Recommendation 7), with Advisory Group representatives 
forming the majority of the selection panel; and 


c) grant recipients should be encouraged to publish and present the results of 
their research at the annual hui on issues related to extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism 
and terrorism (Recommendation 16). 
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15. Create opportunities to improve public understanding of extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism and 
terrorism in New Zealand, led initially by the Minister for National Security and 
Intelligence, and including ongoing public discussions on: 
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a) 


b) 


C) 


d) 


e) 


the nature of New Zealand’s counter-terrorism effort, including current risks and 
threats and how Public sector agencies protect New Zealanders from the threat 
and risk of terrorism; 


who is involved in the counter-terrorism effort and their roles, recognising that 
communities, civil society, local government and the private sector are all part 
of the counter-terrorism effort, including, but not limited to, being important 
sources of information; 


the need to strike the balance between the privacy of individuals and the safety 
of individuals and communities and to understand the social licence for Public 
sector agencies to engage in counter-terrorism and countering violent extremism 
activities; 


supporting the public to understand how to respond when they recognise the 
concerning behaviours and incidents that may demonstrate a person’s potential 
for engaging in violent extremism and terrorism; and 


how social cohesion, social inclusion and diversity contribute to an effective 
society. 


Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to host an annual hui, to bring together relevant central and 
local government agencies, communities, civil society, the private sector and 
researchers (Recommendation 14) to create opportunities to build relationships and 
share understanding of countering violent extremism and terrorism. 
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17. Require in legislation: 
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a) the Minister for National Security and Intelligence to publish during every 
parliamentary cycle the National Security and Intelligence Priorities and refer 
them to the Parliamentary Intelligence and Security Committee for consideration; 


b) the responsible minister (Recommendation 1) to publish an annual threatscape 
report; and 


c) the Parliamentary Intelligence and Security Committee to receive and consider 
submissions on the National Security and Intelligence Priorities and the annual 
threatscape report. 


Review all legislation related to the counter-terrorism effort (including the Terrorism 
Suppression Act 2002 and the Intelligence and Security Act 2017) to ensure it 

is current and enables Public sector agencies to operate effectively, prioritising 
consideration of the creation of precursor terrorism offences in the Terrorism 
Suppression Act, the urgent review of the effect of section 19 of the Intelligence and 
Security Act on target discovery and acceding to and implementing the Budapest 
Convention. 
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Recommendations to improve New Zealand’s firearms 
licensing system 


We recommend that the Government: 


19. 


20. 


21. 


22. 


23. 


24. 


Direct New Zealand Police (or other relevant entity) to make policies and operational 
standards and guidance for the firearms licensing system clear and consistent with 
legislation. 


Direct New Zealand Police (or other relevant entity) to introduce an electronic system 
for processing firearms licence applications. 


Direct New Zealand Police (or other relevant entity) to ensure firearms licensing staff 
have regular training and undertake periodic reviews of the quality of their work. 


Direct New Zealand Police (or other relevant entity) to introduce performance 
indicators that focus on the effective implementation of the firearms licensing system. 
Key indicators should include: 


a) regular performance monitoring of firearms licensing staff to ensure national 
standards are met; and 


b) public confidence in the firearms licensing system is increased (as measured by 
New Zealand Police citizens’ satisfaction survey reports or similar mechanism). 


Direct New Zealand Police (or other relevant entity) to require two new processes in 
the case of applicants who have lived outside of New Zealand for substantial periods 
of time in the ten years preceding the application: 


a) applicants should be required to produce police or criminal history checks from 
countries in which they have previously resided; and 


b) Firearms Vetting Officers should interview family members or other close 
connections in other countries using technology if the applicant does not have 
near relatives or close associates living in New Zealand. 


Introduce mandatory reporting of firearms injuries to New Zealand Police by health 
professionals. 
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Recommendations to support the ongoing recovery needs of 
affected whanau, survivors and witnesses 


We recommend that the Government: 


25. Direct the Ministry of Social Development to work with relevant Public sector 
agencies including the Accident Compensation Corporation, Immigration 
New Zealand, the Ministry of Justice, New Zealand Police and non-government 
organisations to facilitate coordinated access to ongoing recovery support for 
affected whanau, survivors and witnesses of the 15 March 2019 terrorist attack, 
including assigning each whanau, survivor or witness a continuing single point of 
contact who will navigate all required Public sector support on their behalf. 


26. Investigate establishing a Collective Impact Network and Board or other relevant 
mechanism that enables Public sector agencies, non-government organisations and 
affected whanau, survivors and witnesses of the 15 March 2019 terrorist attack to 
agree a specific work programme to provide ongoing wrap-around services to affected 
whanau, survivors and witnesses. 


27. Direct the Department of the Prime Minister and Cabinet in collaboration with 
relevant Public sector agencies to discuss with affected whanau, survivors and 
witnesses of the 15 March 2019 terrorist attack what, if any, restorative justice 
processes might be desired and how such processes might be designed and 
resourced. 
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Recommendations to improve social cohesion and New Zealand’s 
response to our increasingly diverse population 


We recommend that the Government: 


28. 


29. 


30. 


31. 


R22. 


33. 


Announce that the Minister for Social Development and Employment and 
the Ministry of Social Development have responsibility and accountability for 
coordinating a whole-of-government approach to building social cohesion, 
including social inclusion. 


Direct the Ministry of Social Development to discuss and collaborate with 
communities, civil society, local government and the private sector on the 
development of a social cohesion strategic framework and a monitoring and 
evaluation regime. 


Investigate the machinery of government options for an agency focused on ethnic 
communities and multiculturalism and establish a fit for purpose organisational 
design that will encompass the current functions expected of the Office of Ethnic 
Communities and enable the new responsible Public sector agency to focus on and 
perform the following functions: 


a) advise the government and Public sector agencies about priorities and challenges 
that affect ethnic communities’ wellbeing; 


b) collate and use data to analyse, monitor and evaluate Public sector efforts to 
improve the wellbeing of ethnic communities, what those efforts should be and 
how they should be prioritised; and 


c) develop an evaluation framework that incorporates performance indicators that 
examine the impact and effectiveness of government policies and programmes on 
the wellbeing of ethnic communities. 


Prioritise the development of appropriate measures and indicators (such as the 
Living Standards Framework) of social cohesion, including social inclusion. 


Require Public sector agencies to prioritise the collection of data on ethnic and 
religious demographics to support analysis and advice on the implications of 
New Zealand’s rapidly changing society, inform better policy making and enhance 
policy evaluation. 


Direct the chief executives of the Public sector agencies involved in the 
counter-terrorism effort to continue focusing efforts on significantly increasing 
workforce diversity, including in leadership roles, and in consultation with the 
Advisory Group on Counter-terrorism (Recommendation 7). 
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34. Encourage the Public Service Commissioner to publish an annual report that: 


a) provides a comprehensive view of progress by the Public sector on the 
Papa Pounamu commitments including the identification of areas where those 
Public sector agencies are performing well, areas where improvements can be 
made and critical insights across all agencies about where to direct their efforts; 
and 


b) prioritises reporting on progress made by the Public sector agencies involved in 
the counter-terrorism effort. 


Encourage the Public Service Commissioner to continue focusing efforts on 
significantly increasing workforce diversity and attracting diverse talent for 
Public service leadership roles at the first, second and third-tiers. 
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Invest in opportunities for young New Zealanders to learn about their role, rights and 
responsibilities and on the value of ethnic and religious diversity, inclusivity, conflict 
resolution, civic literacy and self-regulation. 
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Create opportunities for regular public conversations led by the responsible minister 
- the Minister for Social Development and Employment - for all New Zealanders to 
share knowledge and improve their understanding of: 
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a) social cohesion, including social inclusion, and the collective effort required to 
achieve these; and 


b) the value that ethnic and religious diversity can contribute to a well-functioning 
society. 


Require all Public sector community engagement to be in accordance with 
New Zealand’s Open Government Partnership commitments and in particular: 
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a) require agencies to be clear about the degree of influence that community 
engagement has on associated decision-making by indicating to communities 
where the engagement sits on the International Association for Public Participation 
IAP2 Public Participation Spectrum; and 


b) encourage agencies to undertake more “involve” and “collaborate” levels 
of engagement in accordance with the International Association for Public 
Participation IAP2 Public Participation Spectrum. 
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39. Amend legislation to create hate-motivated offences in: 


a) the Summary Offences Act 1981 that correspond with the existing offences of 
offensive behaviour or language, assault, wilful damage and intimidation; and 


b) the Crimes Act 1961 that correspond with the existing offences of assaults, arson 
and intentional damage. 


40. Repeal section 131 of the Human Rights Act 1993 and insert a provision in the Crimes 
Act 1961 for an offence of inciting racial or religious disharmony, based on an intent 
to stir up, maintain or normalise hatred, through threatening, abusive or insulting 
communications with protected characteristics that include religious affiliation. 


41. Amend the definition of “objectionable” in section 3 of the Films, Videos, and 
Publications Classification Act 1993 to include racial superiority, racial hatred and 
racial discrimination. 


42. Direct New Zealand Police to revise the ways in which they record complaints of 
criminal conduct to capture systematically hate-motivations for offending and train 
frontline staff in: 


a) identifying bias indicators so that they can identify potential hate crimes when 
they perceive that an offence is hate-motivated; 


b) exploring perceptions of victims and witnesses so that they are in a position to 
record where an offence is perceived to be hate-motivated; and 


c) recording such hate-motivations in a way which facilitates the later use of section 
9(1)(h) of the Sentencing Act 2002. 
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Recommendations for implementation 


We recommend that the Government: 


43. Ensure a minister is given responsibility and accountability to lead and coordinate 
the response to and implementation of our recommendations and announce the 
appointment. 


44. Establish an Implementation Oversight Advisory Group that: 


a) includes representatives of communities, civil society, local government, 
the private sector, affected whanau, survivors and witnesses and our Muslim 
Community Reference Group; 


b) provides advice to the responsible ministers (Recommendations 1 and 43) on 
the design of the government’s implementation plan and its roll-out; and 


c) publishes its advice to enhance transparency. 
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End note 


This report provides an independent account of what happened in the lead up to the 
15 March 2019 terrorist attack, what, if anything, could have been done to stop it and what 
must now be done to better protect New Zealanders. 


From the terrible events of the 15 March 2019 terrorist attack comes the responsibility 
to reflect and learn. 


The first duty of government remains the security of its people. However, national security 
is not the remit of the intelligence and security and law enforcement agencies alone. Many 
Public sector agencies also have a role to play. But importantly so too do communities, 

civil society, local government and the private sector. New Zealanders can play a vital role 
in countering terrorism and extremism. To play that role, New Zealanders must be informed 
about the issues and what they can do to help. 


With this in mind, we have included in our report a vast amount of material previously 
classified as Top Secret or Secret. We have done so to bring into the light how 

New Zealand’s counter-terrorism effort actually works. This will enable future debate to 
be well informed. We see such informed debate as fundamental to the social licence and 
thus the effectiveness of the counter-terrorism effort. 


We recognise that we have finalised our analysis and report in the shadow of COVID-19. 

The pandemic has impacted all communities and has been a stark reminder of the need for 
community resilience and social infrastructure. It has also been a bright illustration of what 
can be achieved when society acts collectively in the broader public interest. 


Fundamental to New Zealand’s future wellbeing and security is social cohesion. While social 
cohesion in New Zealand is much higher than many other countries, there are fault lines. 
Maintaining and enhancing social cohesion is a vital task for government. We are confident 
that the will is there. We have provided mechanisms in our recommendations for that will to 
be realised. 


These changes will not be easy, but we have laid down the wero and we urge the Government 
to take up the challenge and act. 
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and perpetual Aotearoa New Zealand 
icon, the koru. 


The unfurling fern frond is representative of 
peace, tranquillity, growth, positive change 
and awakening. This dimension of peace is also 
inherent in the meaning of the living faith of Islam. 
We draw parallels between this taonga and the 
journey that New Zealanders have ahead of them 
to become a safer and more inclusive society. 


The koru design with seven groups of 
seven unfurling fronds also acknowledges that 
15 March 2019 was, according to the Islamic 
lunar calendar, 7 Rajab 1440, that is, the 
7th day of the 7th Islamic month. 
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Penaloom nd na lawe ond tine dewitorr. 


We start by acknowledging whanau of the 51 shuhada, and the survivors and witnesses of 
the 15 March 2019 terrorist attack and their whanau whose lives have been forever changed. 
Those attacked at the masjidain were New Zealanders who had gathered together in peaceful 
prayer. The terrorist murdered 51 people and attempted to murder a further 40 people. 

His brutal actions were deplorable and incomprehensible. 


The terrorist attack was driven by an extreme right-wing IsLamophobic ideology. Its purpose 
was to promote chaos and disharmony in New Zealand. This purpose failed. In the days, 
weeks and months that followed, New Zealanders united around those affected and 

spoke out against racism, extremism and extremist violence. There was a period of 

national reflection about our shared values, our collective lives and what it means to live 

in New Zealand. 


The country needed to know what had happened, and why, and what should be done 
to reduce the risk of future attacks. This Royal Commission of Inquiry was established. 
It has been our privilege and honour to serve as Members. 


At the heart of our inquiry were those who lost their lives, whanau of the 51 shuhada, 
and the survivors and witnesses of the terrorist attack and their whanau. We wanted to 
listen and engage in a culturally appropriate way. 


We were humbled by those who generously welcomed us into their homes. People shared 
their grief and trauma as well as their love for New Zealand and their wish for better 

connections between all New Zealand communities. People whose lives had been turned 
upside down were nonetheless able to look to the future and be hopeful for New Zealand. 


We scrutinised the life of the individual who planned and carried out the terrorist attack. 
We asked hard questions of Public sector agencies, particularly those tasked with protecting 
New Zealanders from such attacks. 


We met with a wide range of New Zealand and international experts about topics ranging 
from gathering intelligence to social cohesion. Many hundreds of people met with us, wrote 
to us, provided evidence and were interviewed. More than 1,100 people made submissions. 


We are grateful to everyone who engaged with us so openly and honestly. We felt a genuine 
and heartfelt intention to assist this inquiry for the future benefit of all New Zealanders. 
This is especially true of the members of the Muslim Community Reference Group whose 
insights contributed greatly to our report. Likewise, we are grateful to JustCommunity 

and Navigate Your Way Trust, organisations that assisted us to engage with whanau of the 
51 shuhada, and the survivors and witnesses of the terrorist attack and their whanau. 


We thank the international experts and leaders of intelligence and security agencies in 
Australia, Norway, the United Kingdom and the United States of America who gave their time 
and valuable expertise so willingly. We reserve special thanks to Lord Hogan-Howe QPM 
and John McKinnon CNZM QSO who provided independent expertise and insights that were 
critical to our inquiry and this report. 


Finally, we express our gratitude to the secretariat of, and counsels assisting, the Royal 
Commission who brought their diverse views, skills and experience to bear on our work, 
ensuring a robust approach. 


We have made recommendations in this report that are both wide-ranging and detailed. 
They are the building blocks for a safer and more cohesive New Zealand. 
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Hon Sir William Young KNZM Jacqui Caine 
Chair Member 
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Executive summary 


Ten days after the devastating attack of 15 March 2019, the Government announced 
that a Royal Commission of Inquiry, generally reserved for matters of the gravest public 
importance, would be established to investigate and report on what had happened. 


The terrorist attack was carried out by Brenton Harrison Tarrant, who has since been 
convicted of terrorism, the murder of 51 people and attempted murder of 40 people. 
He is now serving a sentence of life imprisonment without parole. We generally refer to 
him in our report as “the individual”. His name will not appear again. 


The Terms of Reference set by the Government directed us to investigate three broad 

areas - the actions of the individual, the actions of relevant Public sector agencies and any 
changes that could prevent such terrorist attacks in the future. This required a detailed, 
forensic examination of evidence. It also led us to expansive thinking about the systems and 
institutions set up to protect and connect New Zealanders. 


Our Terms of Reference required us to make findings on: 


4(a) whether there was any information provided or otherwise available to relevant 
[Public] sector agencies that could or should have alerted them to the terrorist 
attack and, if such information was provided or otherwise available, how the 
agencies responded to any such information, and whether that response was 
appropriate; and 


(b) the interaction amongst relevant [Public] sector agencies, including whether there 
was any failure in information sharing between the relevant agencies; and 


(c) whether relevant [Public] sector agencies failed to anticipate or plan for the terrorist 
attack due to an inappropriate concentration of counter-terrorism resources or 
priorities on other terrorism threats; and 


(d) whether any relevant [Public] sector agency failed to meet required standards or was 
otherwise at fault, whether in whole or in part; and 


(e) any other matters relevant to the purpose of the inquiry, to the extent necessary to 
provide a complete report. 


We saw the first four questions as directed primarily to whether Public sector agencies were 
at fault in respects relevant to the terrorist attack. 


We were also required to make recommendations for the future. 


At the heart of our inquiry were whanau of the 51shuhada, and the survivors and witnesses 
of the terrorist attack and their whanau. Connecting with Muslim communities was an 
expectation in our Terms of Reference, but it was also the right thing to do. We gained 
valuable insights in this way. 


From whanau of the 51 shuhada, and the survivors and witnesses of the terrorist attack 

and their whanau we heard about the ongoing impacts of the terrorist attack, including 
challenges in obtaining government support. Through broader engagement with Muslim 
communities we learned about frustrations with the Public sector that go back many years. 
Muslim communities talked candidly about racism, discrimination and experiences of being 
suspected of being, or treated as, terrorists as well as their fear of being the targets of hate 
speech, hate crime and terrorism. 


Communities we spoke with wanted to see greater social cohesion and told us about their 
wish for closer community connections to help all people feel safe and welcome. Social 
cohesion has direct benefits including people leading happy, rewarding and participatory 
lives, with increased productivity. Importantly, it also means that people are less likely 
to become radicalised towards extremist and violent behaviours, including terrorism. 


There was strong public concern that the individual was granted a firearms licence. 

A large proportion of submissions we received came from firearms owners with suggestions 
to strengthen the firearms licensing process, introduce measures to better track large 
purchases of firearms and ammunition and obligations to report concerning behaviour. 
Many felt that banning military style semi-automatic firearms unnecessarily penalised 
responsible firearms owners, preferring improvements to the licensing system instead. 


Part 4: The terrorist is the result of our extensive inquiries into the life of the individual, 

his background and particularly his planning and preparation for the terrorist attack. We 
understand some people may prefer not to read about him, but we had a duty to report on 
what influenced his extreme views, why he chose New Zealand for a terrorist attack and 
how he avoided coming to the attention of Public sector agencies. 


The individual is a white Australian male who was 28 years old in March 2019. He displayed 
racist behaviour from a young age. His life experiences appear to have fuelled resentment 
and he became radicalised, forming extreme right-wing views about people he considered a 
threat. Eventually, he mobilised to violence. 


The individual arrived in New Zealand on 17 August 2017. As an Australian, he was entitled to 
live in New Zealand. Within a few days of arrival, he moved to Dunedin and from this time, 
his life was largely devoted to planning and preparing for the terrorist attack. We looked at 
his use of online platforms before and during the terrorist attack. We also examined how the 
individual obtained a firearms licence and how he was then legally able to acquire firearms 
and ammunition. We tracked how he trained for the terrorist attack by developing firearms 
expertise and working out at a gym and taking steroids to bulk up. 
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The individual had no close friends and largely avoided social situations and, in that sense, 
he was socially isolated. He was financially independent and widely travelled. In his 
preparation and planning for his terrorist attack, he was methodical and single-minded. 

The individual could present well and conduct himself in a way that did not attract suspicion. 
He was not identified as someone who posed a threat. We expand on the reasons for this in 
the report. 


As we explain in detail in Part 4: The terrorist, we are satisfied that the individual acted alone. 
We look closely at firearms in Part 5: The firearms licence. 


Despite the individual having almost no history in New Zealand, his application for a firearms 
licence was approved within about three months of his arrival in the country. He had named 
his sister as a referee but, because she lived in Australia, firearms licensing staff asked for a 
replacement referee. In the end two New Zealand-based referees (an adult and their parent) 
described as “friends” of the individual, vouched for him as a “fit and proper” person. 

The adult (whom we refer to as “gaming friend”) had played online games with the 

individual over ten years but had been physically in his company for only approximately 

21 days in that entire decade. Gaming friend’s parent had spent only approximately 

seven days in the individual’s presence over four years. In both cases, time spent with the 
individual was sporadic. 


We conclude that during the firearms licence application process, insufficient attention 

was given to whether gaming friend and their parent knew the individual well enough to be 
appropriate referees. We discuss what might have happened if the application had not been 
approved at that time or perhaps had been handled differently. 


We find that New Zealand Police’s administration of the firearms licensing system did not meet 
required standards. The reasons for this include a lack of guidance and training for licensing 
staff and incomplete guidance for dealing with applications where nominated referees cannot 
be interviewed in person. 


For contextual relevance, as amendments to firearms legislation are not within our scope, 

we discuss the regulation of semi-automatic firearms. It was lax, open to easy exploitation 
and was gamed by the individual. The risk that highly lethal weapons might be used ina 
terrorist attack in New Zealand had been recognised on a number of occasions. One warning 
followed a terrorist attack conducted in Oslo and on Utgya Island in Norway in 2011, in which 
a semi-automatic rifle was used. 


We examine in detail what was known by Public sector agencies about the individual before 
the terrorist attack in Part 6: What Public sector agencies knew about the terrorist. We put 
detailed questions to 217 agencies in the wider Public sector and found that ten agencies held 
information that we are satisfied relates to the individual. 
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The only information that directly referred to the terrorist attack was an email the individual 
sent to the Parliamentary Service (as well as politicians, media outlets and individual 
journalists) just eight minutes before the terrorist attack began. The critical information 
about the attack (in terms of the location) was within a 74 page manifesto attached to and 
linked within the email. It took some minutes for the Parliamentary Service to open the 
email, read and make sense of the manifesto and then pass the details on to New Zealand 
Police. By then the terrorist attack had just started. We explore this in detail in Part 6: What 
Public sector agencies knew about the terrorist and we are satisfied that the Parliamentary 
Service followed correct procedures and acted promptly. 


Other information known about the individual was largely unremarkable. With the benefit 
of hindsight, we can see that some did relate to the individual’s planning and preparation. 
That, however, was not apparent at the time as this information was fragmentary. No single 
aspect of it could have alerted Public sector agencies to an impending terrorist attack. 
Public sector agencies involved in the counter-terrorism effort are not set up to collect and 
aggregate information like medical and firearms licensing records. We discuss this in 

Part 6: What Public sector agencies knew about the terrorist. 


In Part 7: Detecting a potential terrorist, we discuss the challenges of detecting and 
disrupting terrorists. Terrorist attacks by lone actors are difficult for intelligence and security 
and law enforcement agencies to detect and stop. Despite this, many intended lone actor 
terrorist attacks have in fact been disrupted. In this Part we use the individual as a case 
study to test and explain some of the issues at play before we move on to look more closely 
at countering terrorism. 


The counter-terrorism effort (which forms a subset of the broader national security 
system) is reviewed in Part 8: Assessing the counter-terrorism effort. The Public sector 
agencies involved in the counter-terrorism effort include the National Security Group of the 
Department of the Prime Minister and Cabinet, the Government Communications Security 
Bureau, Immigration New Zealand, New Zealand Customs Service, New Zealand Police and 
the New Zealand Security Intelligence Service. 


The most pointed of the questions we have been asked to address about the 
counter-terrorism effort is whether relevant Public sector agencies failed to anticipate or 
plan for the terrorist attack because of an inappropriate concentration of counter-terrorism 
resources or priorities on other terrorism threats. This question is not susceptible to an 
easy answer, but we work through the issues methodically. 
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There is a context that must be recognised. The intelligence and security agencies have 
comparatively little social licence. For this and other reasons that we explore, the Public 
sector agencies involved in the counter-terrorism effort had limited capability and capacity - 
far less than many believe. The idea that intelligence and security agencies engage in mass 
surveillance of New Zealanders is a myth. Looking back to 2014, the intelligence and security 
agencies were in a fragile state. A rebuilding exercise did not get underway until mid-2016 
and was still unfinished when the terrorist attack took place in 2019. 


Our assessment has focused primarily on the period between 2016 and 15 March 2019. 

During that time the primary, but not exclusive, focus of the counter-terrorism resources 

was on what was seen as the presenting threat of Islamist extremist terrorism. It is important 
to note that counter-terrorism agencies did follow up leads relating to possible right-wing 
extremist terrorism. So, the concentration on the threat of Islamist extremist terrorism was 
not to the exclusion of addressing other leads when they arose. 


In 2016, the New Zealand Security Intelligence Service identified that establishing a baseline 
picture (an understanding) of other emerging terrorism threats was a goal, but one it would 
pursue only when they had the capacity to do so. This work eventually began in May 2018, 
with one of the projects focused on developing an understanding of right-wing extremism 

in New Zealand. At that time, the New Zealand Security Intelligence Service had only a 
limited understanding of right-wing extremism in New Zealand and work on this was not 
complete when the terrorist attack occurred. 


The intelligence function of New Zealand Police had degraded and from 2015 was not carrying 
out strategic terrorism threat assessments. 


We conclude there was an inappropriate concentration of counter-terrorism resources on 
the threat of Islamist extremist terrorism, but the reasons for this require some teasing out. 


Our concern with the focus of counter-terrorism resources on Islamist extremist terrorism 
is one of process. There are two aspects to this. First, there had been no substantial 
assessments of other potential threats of terrorism. So, the concentration of 
counter-terrorism resources was not based on a comparative risk analysis. Second, 
there had been no informed system-wide decision to proceed on this basis. By this we 
mean a decision made by all relevant Public sector agencies with the knowledge that 
there were other potential threats of terrorism that were not well understood. This also 
requires brief explanation. 
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The New Zealand Security Intelligence Service had decided to concentrate its scarce 
counter-terrorism resources on the presenting threat of Islamist extremist terrorism. 

This was in part because it had a lack of capacity until mid-2018 both to deal with that 

threat and, at the same time, to baseline other threats. Other Public sector agencies 
involved in the counter-terrorism effort did not engage in informed discussion about this 
approach and its implications, including the unmitigated risks. So there was not an informed 
and system wide decision to proceed on this basis which we see as inappropriate. 


All of that said, we find that the concentration of resources on the threat of Islamist extremist 
terrorism is not why the individual’s planning and preparation for his terrorist attack was 

not detected. Given the operational security that the individual maintained, the legislative 
authorising environment in which the counter-terrorism effort operates and the limited 
capability and capacity of the counter-terrorism agencies, there was no plausible way he 
could have been detected except by chance. Despite the concerns we have just discussed 
and other systemic issues we have reviewed in Part 8: Assessing the counter-terrorism effort, 
the fact the individual was not detected was not in itself an intelligence failure. 


We have looked more broadly at the counter-terrorism effort. We have already mentioned 
limited social licence, capability and capacity. By the middle of the last decade, the subjects 
of counter-terrorism, intelligence and security had become politically and publicly toxic. 
There was little political ownership. Public sector leadership was fragmented through 

a decentralised national security system with the Public sector agencies involved in the 
counter-terrorism effort acting in ways that were only loosely coordinated. 


As discussed, rebuilding the capacity and capability of the intelligence and security agencies 
began in mid-2016. Although progress has been made, significantly more is required. 

As well, systemic change is needed, including the creation of a national intelligence and 
security agency. This will deliver a more systematic approach to counter-terrorism and 
countering violent extremism efforts. The chief executive of the new agency will be the 
national adviser on intelligence and security, with the agency having the advantage of 
focusing solely on intelligence and security issues. It will provide comprehensive strategic 
policy advice, develop a counter-terrorism strategy and administer relevant national security 
legislation. The agency will assume responsibility for the development of intelligence 
assessments, underpinned by horizon scanning, and be responsible for the design of the 
performance management framework and monitor progress against it. 


We acknowledge that while our focus has been on the counter-terrorism effort our key 
recommendations are for system-wide change, which relates to all threats and intelligence 
issues. It is impractical to carve out counter-terrorism responsibilities. 


This and other detailed recommendations are set out in Part 10: Recommendations. 
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Full implementation of our recommendations will result in a better organised 
counter-terrorism effort with enhanced capacity and capability and a less restrictive 
legislative framework. We expect to see far more political and public engagement 
and discussion and stronger oversight. This will result in greater public trust and 
thus social licence. We wish to see discussion about counter-terrorism normalised. 
Our recommendations provide mechanisms for this to occur. 


The absence of such discussion to date has had consequences. 


Since 2015, successive governments have been reluctant to proceed with a public-facing 
counter-terrorism strategy. One reason for this was to avoid stigmatising Muslim 
communities further. But, had such a strategy been shared with the public and also 
incorporated a “see something, say something” policy, it is possible that aspects of the 
individual’s planning and preparation may have been reported to counter-terrorism agencies. 
With the benefit of hindsight, such reporting would have provided the best chance of 
disrupting the terrorist attack. A public-facing counter-terrorism strategy would also 

be likely to have included policies to make crowded places safer and to protect possible 
targets from attack. Implementation of such policies may well have reduced the loss of 
life on15 March 2019. As well, if the known risk that a terrorist could take advantage of 
New Zealand’s lax regulation of semi-automatic firearms had been addressed earlier, it is 
likely that there would have been no terrorist attack on 15 March 2019. 


The final set of issues we consider are how social cohesion, inclusion and diversity have 
been approached in New Zealand in Part 9: Social cohesion and embracing diversity. 


Social cohesion, inclusion and diversity were not on our original work plan. But, as our 
inquiry progressed and our engagement with communities deepened, it became clear that 
these issues also warranted consideration. Social cohesion has many direct benefits to 
individuals and communities. In contrast, societies that are polarised around political, 
social, cultural, environmental, economic, ethnic or religious differences will more likely 
see radicalising ideologies develop and flourish. Efforts to build social cohesion, inclusion 
and diversity can contribute to preventing or countering extremism. In addition, having 

a society that is cohesive, inclusive and embraces diversity is a good in itself. 


We considered how Public sector agencies, local government, the private sector, civil 
society and communities can and should support a more cohesive society. Public sector 
efforts have been fragmented and frustrating for the community groups who have engaged 
with them. A public conversation about social cohesion has been notably absent. 

Once again, we conclude systemic change is needed and we set out our thinking in 

Part 10: Recommendations. 
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This report contains 44 recommendations which cover five key areas relating to the 
counter-terrorism effort, the firearms licensing system, the ongoing needs of those most 
affected by the terrorist attack, New Zealand’s response to our increasingly diverse 
population and implementing our recommendations. These are explained in detail in 
Part 10: Recommendations. 


There are some recurring themes and issues that weighed heavily as we considered our 
recommendations. The most important of these is the need to confront and engage openly 
with hard issues. In the course of our inquiry we have looked at Public sector activities 
involving the firearms licensing system, the counter-terrorism effort and social cohesion and 
embracing diversity. Each of these has been characterised by limited political ownership and 
an absence of public discussion. 


The looseness of controls on semi-automatic firearms had been appreciated for decades 
and the risk that a terrorist could take advantage of this was identified as long ago as 2011. 
But there was no significant tightening of the regime largely because of strong opposition 
from the firearms community. 


Media controversy and generally low levels of public trust and confidence in the 
intelligence and security agencies and aspects of the work of the law enforcement 
agencies have meant that politicians have avoided the challenge of public engagement 
about countering-terrorism. 


Building social cohesion, inclusion and embracing diversity are goals that we can all 

aspire to. In a COVID-19 response and recovery environment where there is increased 
stress, growing mental health and addiction issues and an economic downturn, potential 
inequalities and vulnerabilities are magnified. As the country looks ahead there is an 
opportunity to build and enhance our social infrastructure and community resilience in the 
same way that physical infrastructure is being invested in. There is a strong case for further 
cross-government actions to improve social cohesion and how we embrace diversity. 


We accept political engagement on these issues will not be easy. But facing up to the hard 
issues and having open public conversations are critical. We have already discussed the 
consequences of not promoting a public-facing counter-terrorism strategy and not tightening 
loose controls on firearms before the terrorist attack. We hope our report will encourage 
members of the public, officials and politicians to engage in frank debate so that everyone 
understands their roles and responsibilities in keeping New Zealand safe, secure and 
cohesive. There is impetus for debate about the kind of country New Zealand aspires to be. 


Finally, New Zealand will never be immune from violent extremism and terrorism. Even with 
the best systems in the world, a determined would-be terrorist could carry out an attack in 
New Zealand in the future. But there is much that government can do, starting with a greater 
commitment to transparency and openness with New Zealanders. We all have a part to play 
in building common agreement about the values we share and want to uphold as a society 
and for our future generations. 
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Consolidated findings 


Our Terms of Reference required us to make findings as to: 


4(a) 


(b) 


(c) 


(d) 


(e) 


whether there was any information provided or otherwise available to relevant 
[Public] sector agencies that could or should have alerted them to the terrorist 
attack and, if such information was provided or otherwise available, how the 
agencies responded to any such information, and whether that response was 
appropriate; and 


the interaction amongst relevant [Public] sector agencies, including whether there 
was any failure in information sharing between the relevant agencies; and 


whether relevant [Public] sector agencies failed to anticipate or plan for the 
terrorist attack due to an inappropriate concentration of counter-terrorism 
resources or priorities on other terrorism threats; and 


whether any relevant [Public] sector agency failed to meet required standards or 
was otherwise at fault, whether in whole or in part; and 


any other matters relevant to the purpose of the inquiry, to the extent necessary to 
provide a complete report. 


What Public sector agencies knew about the terrorist 


Part 6: What Public sector agencies knew about the terrorist sets out the evidence and 
rationale for our findings. 


“The terrorist attack” means the terrorist attack carried out by the individual in accordance 
with his planning and preparation over the previous years. 


We find that: 


a) The only information about the individual that was known by New Zealand Public sector 


agencies before 15 March 2019 that could or should have alerted them to the terrorist 
attack was the email sent by the individual to the Parliamentary Service just after 


1.32pm on 15 March 2019. 


b) The Parliamentary Service acted appropriately within a period of time that was 


reasonable in the circumstances in response to the email the individual sent just 
before the terrorist attack. 


c) There was no other information provided or otherwise available to any relevant 


Public sector agency that could or should have alerted them to the terrorist attack. 


d) There was no failure in information sharing between the relevant Public sector agencies. 


Assessing the counter-terrorism effort 


Part 8: Assessing the counter-terrorism effort sets out the evidence and rationale for our 
findings. 


We conclude that the concentration of counter-terrorism resources on the threat of Islamist 
extremist terrorism before the New Zealand Security Intelligence Service’s baselining project 
began in May 2018 was inappropriate because it: 


a) was not based on an informed assessment of the threats of terrorism associated with 
other ideologies; and 


b) did not result from a system-wide decision that, despite the absence of such an 
assessment, counter-terrorism resources should continue to be allocated almost 
exclusively to the threat of Islamist extremist terrorism. 


We find that: 


a) The inappropriate concentration of resources on the threat of Islamist extremist 
terrorism did not contribute to the individual’s planning and preparation for his terrorist 
attack not being detected. And for that reason, the Public sector agencies involved in 
the counter-terrorism effort did not fail to anticipate or plan for the terrorist attack due 
to an inappropriate concentration of counter-terrorism resources. 


b) No Public sector agency involved in the counter-terrorism effort failed to meet required 
standards or was otherwise at fault in respects that were material to the individual's 
planning and preparation for his terrorist attack not being detected. 


The firearms licence 


Part 5: The firearms licence sets out the evidence and rationale for our findings. 


We find that: 


a) NewdZealand Police failed to meet required standards in the administration of the 
firearms licensing system in that: 


i) the Arms Manual, the Master Vetting Guide and the Firearms Licence Vetting Guide 
did not provide coherent and complete guidance as to the processing of applications 
where the applicant could not provide a near-relative referee able to be interviewed 
in person; 


ii) New Zealand Police did not put in place arrangements to ensure that firearms 
licensing staff received systematic training and regular reviews of their practice; and 


iil) in dealing with the individual’s firearms licence application, New Zealand Police 
did not adequately address whether gaming friend and their parent knew the 
individual well enough to serve as referees. 
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Summary of recommendations 


Our Terms of Reference directed us to make any recommendations we considered 
appropriate on the following: 


5(1)(a) whether there is any improvement to information gathering, sharing, and analysis 
practices by relevant [Public] sector agencies that could have prevented the 
terrorist attack, or could prevent such terrorist attacks in the future, including, 
but not limited to, the timeliness, adequacy, effectiveness, and co-ordination of 
information disclosure, sharing, or matching between relevant [Public] sector 
agencies; and 


(b) what changes, if any, should be implemented to improve relevant [Public] sector 
agency systems, or operational practices, to ensure the prevention of such 
terrorist attacks in the future; and 


(c) any other matters relevant to the above, to the extent necessary to provide a 
complete report. 


Our recommendations are set out in Part 10: Recommendations and address the 
following areas: 


a) Improving New Zealand’s counter-terrorism effort. 
b) Improving New Zealand’s firearms licensing system. 


c) Supporting the ongoing recovery needs of affected whanau, survivors and witnesses 
of the 15 March 2019 terrorist attack. 


d) Improving New Zealand’s response to our increasingly diverse population. 
e) Implementation of the recommendations. 
The recommendations are organised by four themes. 


Strong government leadership and direction are required to provide effective oversight 
and accountability of the counter-terrorism effort. This will ensure that roles and 
responsibilities are well understood across Reduction, Readiness, Response and Recovery 
at the national, regional and local levels and resources are appropriately focused. 


Strong government leadership and direction are also required to position New Zealand 
(and in particular the Public sector) to respond and adapt to New Zealand’s increasingly 
diverse population and to effect the social shift that over time will help to achieve a safe 
and inclusive New Zealand. 
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Engaged and accountable government decision-making will enable Public sector policies, 
programmes and services to be designed and delivered that meet the requirements of 

New Zealand’s increasingly diverse society. The Public sector (and in particular the agencies 
involved in the counter-terrorism effort) needs to change how it engages with communities. 
The Public sector mindset must shift to value communities’ input into decisions, 
transparency and engaging in robust debate. 


Everyone in society has a role in making New Zealand safe and inclusive but there is no 
common understanding of what those roles are, how they relate to each other and what they 
should be seeking to achieve. Clarity of roles and responsibilities is critical. 


To ensure that everyone is aware of their role in making New Zealand safe and inclusive, the 
government (and the Public sector agencies involved in the counter-terrorism effort) will 
have to ensure that New Zealand’s counter-terrorism effort is valued by the people it seeks to 
protect. Enhancing public trust and confidence in New Zealand’s counter-terrorism effort will 
take time, so work to do so should begin urgently. As well, the government must understand 
what New Zealand’s changing demographics mean for New Zealand as a society and promote 
consistent messages about the benefits of diversity and an inclusive society. 


Underpinning all of this, New Zealand needs fit for purpose laws and policies. This 
extends to ensuring the Intelligence and Security Act 2017 and Terrorism Suppression 
Act 2002 are both fit for purpose, providing for hate crime offences, creating a workable 
approach to hate speech and encouraging the better recording of reports of hate crime. 
Also important is the need for New Zealand Police to improve their administration of the 
firearms licensing system. 
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Recommendations to improve New Zealand’s 
counter-terrorism effort 





We recommend that the Government: 


1. Ensure a minister is given responsibility and accountability to lead and coordinate the 
counter-terrorism effort. 


2. Establish a new national intelligence and security agency that is well-resourced 
and legislatively mandated to be responsible for strategic intelligence and security 
leadership functions including: 


a) achief executive who is designated as the intelligence and security adviser to the 
prime minister and to Cabinet and chairing the Security and Intelligence Board or 
the potential new governance body (Recommendation 3); 


b) operating as the sector lead and coordinator for strategic intelligence and 
security issues; 


c) developing a counter-terrorism strategy that includes countering violent 
extremism (Recommendation 4); 


d) providing strategic policy advice to the responsible minister(s) on intelligence and 
security issues; 


e) intelligence assessment and horizon scanning supported by deep expertise; 


f) leading the engagement with communities, civil society, local government and the 
private sector on strategic intelligence and security issues; 


g) ensuring the counter-terrorism effort conforms to New Zealand’s domestic and 
international human rights obligations; 


h) leveraging the emergency management structures at the local and regional levels; 
i) system performance monitoring and reporting; and 


Jj) accountability to the minister for the performance of the counter-terrorism effort 
(Recommendation 1). 
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3. 


Investigate alternative mechanisms to the voluntary nature of the Security and 
Intelligence Board including the establishment of an Interdepartmental Executive 
Board as provided for by the Public Service Act 2020 to, amongst other things: 


a) align and coordinate the work, planning and budgets across relevant 
Public sector agencies addressing all intelligence and security issues; 


b) report to the Cabinet External Relations and Security Committee, including on 
current and emerging risks and threats, on a quarterly basis; 


c) inrelation to the counter-terrorism effort: 


i) recommend to Cabinet the strategy for addressing extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism 
and terrorism developed by the national intelligence and security agency 
(Recommendation 4); and 


ii) ensure the activities to implement the strategy for addressing extremism 
and preventing, detecting and responding to current and emerging threats of 
violent extremism and terrorism are identified, coordinated and monitored. 


Develop and implement a public-facing strategy that addresses extremism and 
preventing, detecting and responding to current and emerging threats of violent 
extremism and terrorism that: 


a) is led by the new national intelligence and security agency (Recommendation 2); 


b) is developed in collaboration with communities, civil society, local government 
and the private sector; 


c) sets the purpose and the direction of the strategy, with goals, milestones and 
performance measures; 


d) sets priorities for the counter-terrorism effort across Reduction, Readiness, 
Response and Recovery; 


e) defines roles and responsibilities for Public sector agencies, communities, civil 
society, local government and the private sector to implement the strategy across 
Reduction, Readiness, Response and Recovery; 


f) has oversight from the responsible minister (Recommendation 1); and 


g) is reviewed within three years of publication in collaboration with Public sector 
agencies, communities, civil society, local government, the private sector and the 
Advisory Group on Counter-terrorism (Recommendation 7). 
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Amend the Public Finance Act 1989 to require the intelligence and security agencies 
to provide performance information that can be the subject of performance audit by 
the Auditor-General. 


Strengthen the role of the Parliamentary Intelligence and Security Committee so 
that it can provide better and informed cross-parliamentary oversight of the national 
security system (including the counter-terrorism effort) and priority setting, and 
members can access sensitive information as necessary for such oversight. 


Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to establish an Advisory Group on Counter-terrorism: 


a) responsible for providing advice to the national intelligence and security 
agency and the Security and Intelligence Board or its replacement 
(Recommendations 2 and 3); and 


b) with functions to be established in legislation, as soon as practicable, but without 
delaying its establishment. 


Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to include in advice on the National Security and Intelligence 
Priorities and in the annual threatscape report (Recommendation17), a summary of 
the advice provided in the preceding year by the Advisory Group on Counter-terrorism 
(Recommendation 7) and the actions that have been taken in response to that advice. 


Direct the new national intelligence and security agency (Recommendation 2), and in 
the interim the Department of the Prime Minister and Cabinet, to improve intelligence 
and security information sharing practices, including: 


a) driving a change in approach to the “need-to-know” principle across relevant 
Public sector agencies, with special attention given to local government including 
the emergency management structures at the local and regional level, to ensure it 
enables rather than just restricts information sharing; and 


b) overseeing the implementation, within six months, of recommendations in the 
2018 Review of the New Zealand Security Classification System: 


i) expanding the classification system principles to provide that no information 
may remain classified indefinitely and that, where there is doubt as to the 
classification level, information is classified at the lower level; 


ii) revising and strengthening Public sector agency guidance and developing 
training; 
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iil) adopting a topic-based approach to systematic declassification of historic 
records; and 


iv) developing indicators of function and performance of the classification system. 


10. Amend the Intelligence and Security Act 2017 with respect to direct access 
agreements, to require the new national intelligence and security agency, and in 
the interim the Department of the Prime Minister and Cabinet, to regularly report to 
the responsible minister for the counter-terrorism effort on their establishment and 
implementation. 


11. Direct chief executives of Public sector agencies involved in the counter-terrorism 
effort to consider whether an appropriate number of their employees have security 
clearances and ensure that those staff have appropriate access to facilities and 
information management and technology systems to be able to review relevant 
material as required. 


12. Develop and promote an accessible reporting system that enables members of the 
public to easily and safely report concerning behaviours or incidents to a single 
contact point within government. 


Develop and publish indicators and risk factors that illustrate for the public specific 
behaviours that may demonstrate a person’s potential for engaging in violent 
extremism and terrorism and update them regularly as the threatscape evolves. 


13 


Establish a programme to fund independent New Zealand-specific research on 
the causes of, and measures to prevent, violent extremism and terrorism with the 
following provisions: 


14 


a) the national intelligence and security agency (Recommendation 2) should be 
provided with a multi-year appropriation for research funding; 


b) research priorities and grant recipients should be selected by a panel 
comprising officials from the new national intelligence and security agency 
(Recommendation 2) and representatives from the Advisory Group on 
Counter-terrorism (Recommendation 7), with Advisory Group representatives 
forming the majority of the selection panel; and 


c) grant recipients should be encouraged to publish and present the results of 
their research at the annual hui on issues related to extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism 
and terrorism (Recommendation 16). 
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15. Create opportunities to improve public understanding of extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism and 
terrorism in New Zealand, led initially by the Minister for National Security and 
Intelligence, and including ongoing public discussions on: 


16 


a) 


b) 


C) 


d) 


e) 


the nature of New Zealand’s counter-terrorism effort, including current risks and 
threats and how Public sector agencies protect New Zealanders from the threat 
and risk of terrorism; 


who is involved in the counter-terrorism effort and their roles, recognising that 
communities, civil society, local government and the private sector are all part 
of the counter-terrorism effort, including, but not limited to, being important 
sources of information; 


the need to strike the balance between the privacy of individuals and the safety 
of individuals and communities and to understand the social licence for Public 
sector agencies to engage in counter-terrorism and countering violent extremism 
activities; 


supporting the public to understand how to respond when they recognise the 
concerning behaviours and incidents that may demonstrate a person’s potential 
for engaging in violent extremism and terrorism; and 


how social cohesion, social inclusion and diversity contribute to an effective 
society. 


Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to host an annual hui, to bring together relevant central and 
local government agencies, communities, civil society, the private sector and 
researchers (Recommendation 14) to create opportunities to build relationships and 
share understanding of countering violent extremism and terrorism. 
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17. Require in legislation: 


18 


a) the Minister for National Security and Intelligence to publish during every 
parliamentary cycle the National Security and Intelligence Priorities and refer 
them to the Parliamentary Intelligence and Security Committee for consideration; 


b) the responsible minister (Recommendation 1) to publish an annual threatscape 
report; and 


c) the Parliamentary Intelligence and Security Committee to receive and consider 
submissions on the National Security and Intelligence Priorities and the annual 
threatscape report. 


Review all legislation related to the counter-terrorism effort (including the Terrorism 
Suppression Act 2002 and the Intelligence and Security Act 2017) to ensure it 

is current and enables Public sector agencies to operate effectively, prioritising 
consideration of the creation of precursor terrorism offences in the Terrorism 
Suppression Act, the urgent review of the effect of section 19 of the Intelligence and 
Security Act on target discovery and acceding to and implementing the Budapest 
Convention. 
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Recommendations to improve New Zealand’s firearms 
licensing system 


We recommend that the Government: 


19. 


20. 


21. 


22. 


23. 


24. 


Direct New Zealand Police (or other relevant entity) to make policies and operational 
standards and guidance for the firearms licensing system clear and consistent with 
legislation. 


Direct New Zealand Police (or other relevant entity) to introduce an electronic system 
for processing firearms licence applications. 


Direct New Zealand Police (or other relevant entity) to ensure firearms licensing staff 
have regular training and undertake periodic reviews of the quality of their work. 


Direct New Zealand Police (or other relevant entity) to introduce performance 
indicators that focus on the effective implementation of the firearms licensing system. 
Key indicators should include: 


a) regular performance monitoring of firearms licensing staff to ensure national 
standards are met; and 


b) public confidence in the firearms licensing system is increased (as measured by 
New Zealand Police citizens’ satisfaction survey reports or similar mechanism). 


Direct New Zealand Police (or other relevant entity) to require two new processes in 
the case of applicants who have lived outside of New Zealand for substantial periods 
of time in the ten years preceding the application: 


a) applicants should be required to produce police or criminal history checks from 
countries in which they have previously resided; and 


b) Firearms Vetting Officers should interview family members or other close 
connections in other countries using technology if the applicant does not have 
near relatives or close associates living in New Zealand. 


Introduce mandatory reporting of firearms injuries to New Zealand Police by health 
professionals. 
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Recommendations to support the ongoing recovery needs of 
affected whanau, survivors and witnesses 


We recommend that the Government: 


25. Direct the Ministry of Social Development to work with relevant Public sector 
agencies including the Accident Compensation Corporation, Immigration 
New Zealand, the Ministry of Justice, New Zealand Police and non-government 
organisations to facilitate coordinated access to ongoing recovery support for 
affected whanau, survivors and witnesses of the 15 March 2019 terrorist attack, 
including assigning each whanau, survivor or witness a continuing single point of 
contact who will navigate all required Public sector support on their behalf. 


26. Investigate establishing a Collective Impact Network and Board or other relevant 
mechanism that enables Public sector agencies, non-government organisations and 
affected whanau, survivors and witnesses of the 15 March 2019 terrorist attack to 
agree a specific work programme to provide ongoing wrap-around services to affected 
whanau, survivors and witnesses. 


27. Direct the Department of the Prime Minister and Cabinet in collaboration with 
relevant Public sector agencies to discuss with affected whanau, survivors and 
witnesses of the 15 March 2019 terrorist attack what, if any, restorative justice 
processes might be desired and how such processes might be designed and 
resourced. 
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Recommendations to improve social cohesion and New Zealand’s 
response to our increasingly diverse population 


We recommend that the Government: 


28. 


29. 


30. 


31. 


R22. 


33. 


Announce that the Minister for Social Development and Employment and 
the Ministry of Social Development have responsibility and accountability for 
coordinating a whole-of-government approach to building social cohesion, 
including social inclusion. 


Direct the Ministry of Social Development to discuss and collaborate with 
communities, civil society, local government and the private sector on the 
development of a social cohesion strategic framework and a monitoring and 
evaluation regime. 


Investigate the machinery of government options for an agency focused on ethnic 
communities and multiculturalism and establish a fit for purpose organisational 
design that will encompass the current functions expected of the Office of Ethnic 
Communities and enable the new responsible Public sector agency to focus on and 
perform the following functions: 


a) advise the government and Public sector agencies about priorities and challenges 
that affect ethnic communities’ wellbeing; 


b) collate and use data to analyse, monitor and evaluate Public sector efforts to 
improve the wellbeing of ethnic communities, what those efforts should be and 
how they should be prioritised; and 


c) develop an evaluation framework that incorporates performance indicators that 
examine the impact and effectiveness of government policies and programmes on 
the wellbeing of ethnic communities. 


Prioritise the development of appropriate measures and indicators (such as the 
Living Standards Framework) of social cohesion, including social inclusion. 


Require Public sector agencies to prioritise the collection of data on ethnic and 
religious demographics to support analysis and advice on the implications of 
New Zealand’s rapidly changing society, inform better policy making and enhance 
policy evaluation. 


Direct the chief executives of the Public sector agencies involved in the 
counter-terrorism effort to continue focusing efforts on significantly increasing 
workforce diversity, including in leadership roles, and in consultation with the 
Advisory Group on Counter-terrorism (Recommendation 7). 
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34. Encourage the Public Service Commissioner to publish an annual report that: 


a) provides a comprehensive view of progress by the Public sector on the 
Papa Pounamu commitments including the identification of areas where those 
Public sector agencies are performing well, areas where improvements can be 
made and critical insights across all agencies about where to direct their efforts; 
and 


b) prioritises reporting on progress made by the Public sector agencies involved in 
the counter-terrorism effort. 


Encourage the Public Service Commissioner to continue focusing efforts on 
significantly increasing workforce diversity and attracting diverse talent for 
Public service leadership roles at the first, second and third-tiers. 
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Invest in opportunities for young New Zealanders to learn about their role, rights and 
responsibilities and on the value of ethnic and religious diversity, inclusivity, conflict 
resolution, civic literacy and self-regulation. 


36 


Create opportunities for regular public conversations led by the responsible minister 
- the Minister for Social Development and Employment - for all New Zealanders to 
share knowledge and improve their understanding of: 


37 


a) social cohesion, including social inclusion, and the collective effort required to 
achieve these; and 


b) the value that ethnic and religious diversity can contribute to a well-functioning 
society. 


Require all Public sector community engagement to be in accordance with 
New Zealand’s Open Government Partnership commitments and in particular: 


38 


a) require agencies to be clear about the degree of influence that community 
engagement has on associated decision-making by indicating to communities 
where the engagement sits on the International Association for Public Participation 
IAP2 Public Participation Spectrum; and 


b) encourage agencies to undertake more “involve” and “collaborate” levels 
of engagement in accordance with the International Association for Public 
Participation IAP2 Public Participation Spectrum. 
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39. Amend legislation to create hate-motivated offences in: 


a) the Summary Offences Act 1981 that correspond with the existing offences of 
offensive behaviour or language, assault, wilful damage and intimidation; and 


b) the Crimes Act 1961 that correspond with the existing offences of assaults, arson 
and intentional damage. 


40. Repeal section 131 of the Human Rights Act 1993 and insert a provision in the Crimes 
Act 1961 for an offence of inciting racial or religious disharmony, based on an intent 
to stir up, maintain or normalise hatred, through threatening, abusive or insulting 
communications with protected characteristics that include religious affiliation. 


41. Amend the definition of “objectionable” in section 3 of the Films, Videos, and 
Publications Classification Act 1993 to include racial superiority, racial hatred and 
racial discrimination. 


42. Direct New Zealand Police to revise the ways in which they record complaints of 
criminal conduct to capture systematically hate-motivations for offending and train 
frontline staff in: 


a) identifying bias indicators so that they can identify potential hate crimes when 
they perceive that an offence is hate-motivated; 


b) exploring perceptions of victims and witnesses so that they are in a position to 
record where an offence is perceived to be hate-motivated; and 


c) recording such hate-motivations in a way which facilitates the later use of section 
9(1)(h) of the Sentencing Act 2002. 
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Recommendations for implementation 


We recommend that the Government: 


43. Ensure a minister is given responsibility and accountability to lead and coordinate 
the response to and implementation of our recommendations and announce the 
appointment. 


44. Establish an Implementation Oversight Advisory Group that: 


a) includes representatives of communities, civil society, local government, 
the private sector, affected whanau, survivors and witnesses and our Muslim 
Community Reference Group; 


b) provides advice to the responsible ministers (Recommendations 1 and 43) on 
the design of the government’s implementation plan and its roll-out; and 


c) publishes its advice to enhance transparency. 
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Chapter 1: Introduction 
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As distressing as it is to recall the terrorist attack that ended the lives of 51 people and 
injured many more, it is necessary to include at the beginning of this report a detailed 
description of the events that led to this Royal Commission of Inquiry, that is, the terrorist 
attack on the masjidain that took place in Christchurch, New Zealand on15 March 2019 
(chapter 2 of this Part). 


The details in the next chapter may be challenging to read and, for those who have been 
personally affected by the terrorist attack, it could cause strong emotional responses. 


We use the description “affected whanau, survivors and witnesses” to refer to whanau 

of the 51 shuhada, and the survivors and witnesses of the terrorist attack and their whanau. 
We have chosen not to name shuhada, survivors and witnesses in chapter 2 of this Part. 
We acknowledge acts of heroism and compassion, but believe it would be inappropriate 

to name some people and not all. 


It is entirely possible to read this report without revisiting the events of 15 March 2019. 
Those who decide not to read chapter 2 of this Part will not be at a disadvantage. 

We generally refer to the convicted terrorist and murderer who carried out the terrorist 
attack as “the individual” throughout this report. 


Following the terrorist attack, the Government announced a Royal Commission of Inquiry. 
We cover our establishment and Terms of Reference in chapter 3 of this Part. In chapter 4, 
we outline the processes we followed. Finally, in chapter 5 we explain the structure of 
this report. We traverse a range of matters, from very specific operational aspects, to 
Public sector systems and social norms and behaviours. There is a logic to the report 
structure, but given the complexities, we provide a guide to help readers navigate the 
more than 750 pages to come. 
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Chapter 2: The terrorist attack 


Christchurch has a small but growing number of people of Muslim faith among its total 
population of around 388,500 people. Many people worship at Masjid an-Nur on 

Deans Avenue and at the Linwood Islamic Centre on Linwood Avenue. Both masjidain have 
members from diverse ethnic backgrounds. Some members are New Zealand-born, others 
immigrated here, including some who came as refugees. They have a range of working 
backgrounds and home lives. A shared belief in Islam is what draws them together. 


On Friday 15 March 2019, a little before solar noon, members of both masjidain were 
beginning to gather for Jumu’ah, Friday prayers. There were about 190 worshippers at 
Masjid an-Nur and around 100 worshippers at the Linwood Islamic Centre. 


A Global Climate Strike for Future march for high school students was underway in the city 
centre. That apart, 15 March 2019 was an ordinary mild autumn Friday in Christchurch. 


Earlier in the day, the individual had left his home in Dunedin and driven to Christchurch, 
a distance of some 360 kilometres. He reached the outskirts of the city at approximately 
1.00 pm. 


The individual had six firearms in his car - two semi-automatic rifles, two other rifles and 
two shotguns - along with loaded large capacity magazines (some of which had been 
coupled together to facilitate changing magazines rapidly) and rounds of ammunition. 

He had already written words and phrases on the firearms and magazines reflecting his 
extreme right-wing, ethno-nationalist and IsLamophobic ideology. There were more than 
200 references to events in history, individuals or ideas, using short-hand terms that were 
intended to be recognisable and meaningful to those whose thinking aligned with that of 
the individual. 


The individual had in his car four crude incendiary devices, two ballistic armour 
(bullet-proof) vests, military style camouflage clothing, a military style tactical vest, a 
GoPro camera, an audio speaker and a ballistic style tactical helmet. He also hada 
scabbard with a bayonet-style knife (with anti-Muslim writing on it). 
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The individual stopped in a carpark near Masjid an-Nur. He arranged the firearms so that 
four firearms were in the front of his car and the other two were in the rear of the vehicle. He 
draped one of the ballistic vests over the back of the driver’s seat (to protect himself against 
any shots that might be fired at him from behind). He then put on the other ballistic vest, the 
military style camouflage clothing and the tactical vest. The tactical vest held at least seven 
magazines. The scabbard and the speaker were attached to his tactical vest. 


At 1.26 pm, the individual updated his Facebook status with links to seven different file 
sharing websites that contained copies of a manifesto he had written explaining his 
motivation for the terrorist attack he was about to carry out. 


At 1.28 pm, he posted an anonymous message to an online discussion board called 8chan, 
which was known to attract people with white supremacist and anti-immigrant views: 


Well lads, it’s time to stop shitposting and time to 
make a real life effort post. | will carry out and attack 
the invaders, and will even live stream the attack via 
facebook. 


The facebook link is below, by the time you read this | 
should be going live. 


[link to Facebook] 


It’s been a long ride and despite all your rampant 
faggotry, fecklessness and degeneracy, you are all top 
blokes and the best bunch of cobbers a man could ask for. 


| have provided links to my writings below, please do 
your part by spreading my message, making memes and 
shitposting as you usually do. 


If | don’t survive the attack, goodbye, godbless and | will 
see you all in Valhalla! 
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This message directed readers to his Facebook page. It was intended to, and did, have 
the effect of enlisting the help of an online community to spread widely and quickly news 
of the terrorist attack, the manifesto and the video he would later livestream from his 
GoPro camera. 


At 1.31 pm and 1.32 pm, he sent final messages to his mother Sharon Tarrant and sister 
Lauren Tarrant through Facebook Messenger. 


At 1.32 pm, the individual also sent an email to 34 recipients, including the Office 
of the Prime Minister, the Leader of the Opposition, media organisations and the 
Parliamentary Service. The email contained this message: 


Date: 15 March 2019, 1.32 pm 
From: [The individual] 
To: [34 recipients] 


Subject: On the attack in New Zealand today 


| was the partisan that committed the assault. | have attached 
my writings to explain my actions and beliefs as well as provided 
links to webpages to download the documents below. 


[link to file sharing websites that contained copies of his 
manifesto] 





At 1.33 pm, he linked his GoPro camera to his mobile phone and, with the camera mounted 
on the front of his helmet, he began to livestream footage to his Facebook page. This meant 
that he was filming everything he did and said and broadcasting it live to an international 
audience. 


At 1.34 pm, the individual drove from the carpark in the direction of Masjid an-Nur on 
Deans Avenue. At 1.36 pm, he pulled over on the side of Deans Avenue and took off his 
helmet. He turned the GoPro directly towards his face and addressed his online audience. 
He then put the helmet back on his head, where it remained for the duration of the 
terrorist attack. The livestreamed video shows a person on the footpath walking past 

the vehicle without stopping. 


Shortly after, at 1.37 pm, the individual turned on a strobe light, which was attached to one 
of the semi-automatic rifles and produced regular flashes of bright light. The purpose was to 
confuse and disorient the worshippers he was about to attack. The individual then continued 
to drive along Deans Avenue and stopped in a driveway just to the north of the masjid. 
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At 1.39 pm, the individual got out of his car, carrying the rifle with the strobe light attached. 
He walked to the rear of his vehicle and removed a semi-automatic shotgun. 


At 1.40 pm, the individual walked towards Masjid an-Nur carrying the two firearms. 
Worshippers were inside or walking towards the masjid for Friday prayers. The individual 
opened fire with the shotgun, shooting four worshippers who were just entering the masjid. 
He then walked inside the masjid and continued shooting worshippers. When his shotgun 
ran out of ammunition, he abandoned it and used the semi-automatic rifle. 


The first of a number of 111 emergency calls from the scene was received by 
New Zealand Police at 1.41 pm. 


Worshippers tried to hide or flee from the building. Many of those in the men’s prayer room 
could not open the emergency door and therefore could not get away. However, some 
worshippers were able to smash a window and escape through it. 


Inside the masjid a worshipper ran at the individual and was shot as he did so. He then 
crashed into the individual, knocking him to the ground and dislodging a magazine from his 
tactical vest. This worshipper died from his injuries. 


At 1.42 pm, the individual left Masjid an-Nur to return to his car. On his way, he fired at 
people outside the masjid and on the Deans Avenue footpath to the north and south of the 
masjid. When he reached his car, he dropped the semi-automatic rifle he had been using in 
the driveway and retrieved the other semi-automatic rifle. He lifted up one of the incendiary 
devices in the rear of his vehicle but ultimately left it in the car. He then ran to a driveway to 
the south of the masjid, firing at those he could see. Entering the masjid again, he fired more 
shots at people inside before returning to his car. On the way, he fired at people outside the 
masjid and in the carpark, including women who had come out of the women’s prayer room 
and were trying to flee through a pedestrian gateway. 


Some worshippers in the masjid car park were helped over the high boundary wall by other 
worshippers or neighbours. Some worshippers, having escaped the masjid grounds, were 
able to take refuge in nearby houses. While traffic initially continued to flow past the masjid, 
some people passing by stopped and provided cover and medical assistance to worshippers. 


Throughout the terrorist attack, the individual played music through the speaker on his vest 
at high volume. This was from a playlist of pre-selected music, including an anti-Muslim song 
“Remove Kebab”, which is associated with the civil war in the former Yugoslavia. He also 
continued to talk to the livestream audience during the attack with intermittent commentary 
as the GoPro and audio feed kept transmitting. 
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At 1.45 pm, the individual got back into his car and drove towards the Linwood Islamic 
Centre, which is approximately six kilometres away. He selected its address in his satellite 
navigation system. As he was leaving, he stopped several times to use the second shotgun 
to fire shots from his car at people near Masjid an-Nur, leaving holes in his front windscreen 
and smashing the passenger window of his car. Sirens from the first police vehicles to arrive 
at Masjid an-Nur can be heard in the livestream video, as the individual was driving towards 
Linwood. 


In the course of his high-speed drive to Linwood (reaching speeds of up to 130 kilometres per 
hour in a50 kilometres per hour zone), the individual talked and laughed, still addressing 
those following the livestream of his terrorist attack. He drove erratically, weaving in and out 
of traffic, driving on the wrong side of the road and up onto the grass median strip. He also 
unsuccessfully attempted, on two occasions, to shoot the driver of a car next to him. Before 
the individual arrived at the Linwood Islamic Centre, the livestream footage of the terrorist 
attack stopped. This was at 1.51 pm. The GoPro was, however, still active and continued to 
record until he was apprehended by New Zealand Police. 


The individual arrived at the Linwood Islamic Centre at 1.52 pm. The worshippers had not 
been alerted to the terrorist attack at Masjid an-Nur. The individual parked across the end 
of the driveway, on Linwood Avenue. He ran towards the masjid with a third rifle, firing shots 
at people outside the building and then through a window into the masjid. After about a 
minute he abandoned this now empty rifle and returned to his car. He was followed down 
the driveway by a worshipper who yelled at him. 


The individual removed the second of his semi-automatic rifles from his vehicle and fired 
at the worshipper, who had to dive between cars to avoid being hit. The individual went to 
the masjid entrance and fired at people with this rifle until he ran out of ammunition. He 
then dropped the rifle and ran towards his car. As he was doing this, the worshipper who 
had earlier followed the individual in the driveway threw a hand-held EFTPOS machine (an 
electronic payment device) at him. The worshipper then picked up one of the abandoned 
rifles and pursued the individual to his car, eventually throwing the rifle at the individual’s 
vehicle as he was driving away. This shattered a rear passenger window. 


Throughout the terrorist attack, worshippers tried to take cover, with some hiding behind 
cars in the driveway and carpark. 


At 1.55 pm, the individual drove off at high speed (up to 120 kilometres per hour). The first 
report of shots having been fired in Linwood was made at 1.56 pm. New Zealand Police 
officers arrived at the Linwood Islamic Centre at 1.59 pm. 
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Figure 1: Route taken by the individual during the terrorist attack 
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30 The individual’s intention had been to drive to the Ashburton Masjid to continue his terrorist 
attack. We know this based on what is in his manifesto about his intentions, his putting the 
address of the Ashburton Masjid in his satellite navigation system, what he told interviewing 
New Zealand Police detectives later that day and what he told us when we interviewed him. 
His direction of travel when he was apprehended by New Zealand Police was consistent with 
this purpose and he still had with him the last of his rifles. 


31 Given reporting by witnesses of his car’s number plate to New Zealand Police, the highly 
visible gunshot holes in the car windscreen, smashed windows, the distance to Ashburton 
of 92 kilometres and the single practicable route to that town from Christchurch, it was never 
likely that he would have reached the Ashburton Masjid. Indeed, just minutes after leaving 
the Linwood Islamic Centre and only four kilometres away, he was arrested after two 
New Zealand Police officers rammed his vehicle with their car. 
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Fifty-one people died as a result of gunshot wounds suffered at the two masjidain on that 
day. The oldest victim was 77 years old and the youngest three years old. Another 40 people 
suffered gunshot injuries, many of which have been catastrophically life changing. Some 
whanau suffered multiple tragedies with more than one person killed or injured. 


In response to the terrorist attack New Zealand Police directed that Christchurch lock down 
- people were told by news, social media and their workplaces to stay inside for their safety 
until further notice. It was not clear whether more attackers were in the area. Children 
sheltered in their schools. Breaking news reports came through on the radio and television 
as word spread of the terrorist attack. 


In the aftermath of the terrorist attack, affected whanau, survivors and witnesses faced 
major physical, emotional and other challenges. Many of these are ongoing. Communities 
throughout New Zealand felt less safe and secure. 


Despite efforts by social media companies and Public sector agencies, both the GoPro 
footage taken by the individual of the terrorist attack and his manifesto spread across the 
internet. The video that was initially livestreamed by the individual on Facebook went on 

to be shared by many others, multiplying its global reach. It found its way onto multiple 
platforms including Twitter, YouTube and Reddit. Some people reported unintentionally 
seeing the video when it autoplayed on their news or video feeds. Those who watched 

the video included survivors of the terrorist attack as they lay in hospital, whanau of the 
shuhada, witnesses of the attack and ordinary people in Christchurch and around the world 
- adults and children alike. Almost as fast as social media platforms could remove the 
offensive and graphic footage, it was replaced - sometimes spliced into new video clips, 
making it impossible to detect quickly. Days after the terrorist attack, the manifesto and 
the video were classified as objectionable by New Zealand’s Chief Censor, making it illegal to 
possess and distribute them. Both are, however, still available on websites based outside of 
New Zealand. 


New Zealanders reacted to the terrorist attack on 15 March 2019 with shock, disbelief, 

horror, sympathy and with an outpouring of public grief and solidarity with affected whanau, 
survivors and witnesses. News media covered the event and the aftermath comprehensively 
with extended interviews with affected whanau, survivors and witnesses. The media also 
interviewed ordinary citizens who wanted Muslim communities to know that New Zealanders 
rejected the terrorist attack and the apparent motivation. The remarkable acts of bravery by 
shuhada and survivors were highlighted, including the actions of the worshipper who ran at 
the individual during the terrorist attack and the worshipper who pursued the individual with 
an abandoned rifle. So too were the selfless acts of witnesses who provided assistance to 
worshippers during and immediately following the terrorist attack, such as those who helped 
worshippers over the fence of Masjid an-Nur, sheltered those who were fleeing the terrorist 
attack and gave first aid to those who were wounded. 
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News media coverage also focused public attention on the treatment of New Zealand’s ethnic 
and religious communities, and Muslim communities in particular. Questions were asked 
about the administration of the firearms licensing system and the performance of 

New Zealand Police, the intelligence and security agencies and the wider national security 
system. 


This Royal Commission was established by the Government to provide an independent and 
authoritative report addressing these concerns. 


On 26 March 2020, the individual pleaded guilty to 51 charges of murder, 40 charges of 
attempted murder and one charge of engaging in a terrorist act. He was convicted of those 
offences. 


On 27 August 2020, the individual was sentenced to life imprisonment without parole for 
each of the 51 charges of murder.’ He was further sentenced to concurrent terms of 12 years’ 
imprisonment for each of the 40 charges of attempted murder. He was also sentenced to 
life imprisonment for engaging in a terrorist act. It is the first sentence of life imprisonment 
without parole to be imposed in New Zealand’s history. 


On 27 August 2020, the individual was designated as a terrorist entity under the Terrorism 
Suppression Act 2002.” This means the individual’s assets are frozen. The designation also 
makes it a criminal offence for anyone else to participate in, or finance, the activities of the 
individual. 


" Rv Tarrant [2020] NZHC 2192. 


? New Zealand Gazette 2020-g03941. 
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Chapter 3: Establishment of the Royal Commission 
and our Terms of Reference 


The Royal Commission was established by Order in Council on 8 April 2019.3 It appointed the 
Honourable Sir William Young as Chair and set out our Terms of Reference. Jacqui Caine was 
appointed as a Member of the Royal Commission on 22 May 2019. 


The original reporting date of 10 December 2019 was subsequently extended on two 
occasions until the final reporting date of 26 November 2020. These extensions were 
necessary because of the sheer volume of material we had to assess and the disruption 
resulting from the COVID-19 pandemic. 


Our Terms of Reference directed us to inquire into what Public sector agencies knew about 
the individual’s activities before the terrorist attack, what (if anything) they did with that 
information, what they could have done to prevent the terrorist attack and what they should 
do to prevent such terrorist attacks in the future. 


As well, we were asked to investigate the individual’s activities before 15 March 2019, including: 
a) his time in Australia; 

b) his arrival and residence in New Zealand; 

c) his travel within New Zealand, and internationally; 

d) how he obtained a gun licence, weapons and ammunition; 

e) his use of social media and other online media; and 


f) his connections with people, whether in New Zealand or internationally. 


3 New Zealand Gazette 2019-dli600. 
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5  Wewere directed to make findings as to: 


4(a) whether there was any information provided or otherwise available to relevant [Public] 
sector agencies that could or should have alerted them to the terrorist attack and, 
if such information was provided or otherwise available, how the agencies responded 
to any such information, and whether that response was appropriate; and 


(b) the interaction amongst relevant [Public] sector agencies, including whether there was 
any failure in information sharing between the relevant agencies; and 


(c) whether relevant [Public] sector agencies failed to anticipate or plan for the terrorist 
attack due to an inappropriate concentration of counter-terrorism resources or 
priorities on other terrorism threats; and 


(d) whether any relevant [Public] sector agency failed to meet required standards or was 
otherwise at fault, whether in whole or in part; and 


(e) any other matters relevant to the purpose of the inquiry, to the extent necessary to 
provide a complete report. 


6 And finally, recommendations were sought on: 


5(1)(a) whether there is any improvement to information gathering, sharing, and analysis 
practices by relevant [Public] sector agencies that could have prevented the 
terrorist attack, or could prevent such terrorist attacks in the future, including, 
but not limited to, the timeliness, adequacy, effectiveness, and co-ordination of 
information disclosure, sharing, or matching between relevant [Public] sector 
agencies; and 


(b) what changes, if any, should be implemented to improve relevant [Public] sector 
agency systems, or operational practices, to ensure the prevention of such terrorist 
attacks in the future; and 


(c) any other matters relevant to the above, to the extent necessary to provide a 
complete report. 


7 The Terms of Reference directed that certain issues were outside our scope - the guilt 
or innocence of any individual charged with offences in relation to the terrorist attack, 
amendments to firearms legislation, activity by entities or organisations outside the 
Public sector agencies (such as media platforms) and the response to the terrorist 
attack once it had begun. 
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We were required to: 
a) connect with New Zealand’s Muslim communities; 


b) maintain the confidentiality of information that could be harmful to the public interest 
if it was released, including information about the operational practices of Public sector 
agencies (particularly intelligence and security agencies) and information supplied in 
confidence to the New Zealand government; and 


c) protect the fair trial rights of the individual charged with offences in relation to the 
terrorist attack. 


The Order in Council defined relevant Public sector agencies as the Government 
Communications Security Bureau, Immigration New Zealand, New Zealand Customs Service, 
New Zealand Police and the New Zealand Security Intelligence Service. But the definition in 
clause 3 also included: 


... any other agency whose functions or conduct, in the inquiry’s view, needs to be 
considered in order to fulfil the inquiry’s terms of reference. 


We saw this as including the Department of the Prime Minister and Cabinet, which has a 
significant role in the national security system, and the Department of Internal Affairs 
through its Office of Ethnic Communities, which has a role in social cohesion and embracing 
diversity programmes. 


50 


—_———) 


Chapter 4: The process we followed 





vu 
c 
= 
To 
° 
n 
oO 
m 
D> 
Qa 
To 
= 
° 
Qa 
oO 
wn 
wn 


4.1 Overview 


In this chapter we provide an overview of the process we followed. Under the Inquiries 

Act 2013, a Royal Commission may conduct its inquiry as it considers appropriate, subject 
to any restrictions in its Terms of Reference or in the Inquiries Act. As we will explain, our 
inquiry was conducted in private. Limiting public participation meant we needed to provide 
transparency in other ways during our inquiry. 


The matters that we were investigating directly concerned the operational practices of 

Public sector agencies, including the methods used by the intelligence and security agencies 
to gather information. Our Terms of Reference required us to ensure that information 

we received from relevant Public sector agencies remained confidential, where this was 
necessary, to protect public safety and the security and defence interests of New Zealand, a 
requirement that extended to information supplied in confidence from international partners. 


We ensured that current and former Public sector employees and contractors (including 
those who worked for the intelligence and security agencies) could contact us confidentially. 
We were concerned that, without these arrangements, some may have been deterred from 
providing us with information for fear of repercussions in their current or future roles within 
the Public sector. 


At the same time, we were aware of the significant public interest in our proceedings. Our 
report had to provide reassurance to the New Zealand public, particularly New Zealand’s 
Muslim communities, that all appropriate measures are being taken to ensure their 

safety and protection. Connecting with the public was a necessary part of providing this 
reassurance. 


After careful consideration, we reached the view that our Terms of Reference practically 
required our process to be conducted in private. They directed us to ensure that sensitive 
information was protected, the operational tradecraft of intelligence and security agencies 
remained confidential and the fair trial rights of the individual were preserved.* As well, we 
wanted to protect the privacy of affected whanau, survivors and witnesses of the terrorist 
attack, and to respect the wishes of some people who would have been concerned about 
possible repercussions if their names or comments became public. A private process meant 
that we could address those concerns. 


4 For more information on the Royal Commission of Inquiry’s Minutes, see https://christchurchattack.royalcommission.nz. 
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We took steps to achieve a reasonable measure of transparency and, in this way, 
provide reassurance to the New Zealand public. For example, we undertook 
broad-based engagement through meetings with New Zealand communities, including 
Muslim communities, and provided regular updates on progress through the Royal 
Commission’s website. In respect of our updates, we published the names of most 
people we interviewed, procedural minutes, meeting notes from the Muslim Community 
Reference Group and outlined each stage of our inquiry as we progressed. 


In relation to gathering information and evidence, we adopted an iterative and inquisitorial 
process including: 


a) engaging with affected whanau, survivors and witnesses; 

b) meeting with Muslim communities; 

c) meeting with ethnic and religious communities and interest groups; 
d) receiving submissions; 

e) requesting evidence from Public sector agencies; 

f) meeting with local authorities; 

g) meeting with the integrity agencies; 

h) requesting information from businesses; 


i) interviewing Public sector employees, including chief executives of the named 
Public sector agencies, under oath or affirmation; 


Jj) seeking information from relevant Australian organisations; 
k) meeting with and consulting experts; 

\) interviewing former and current ministers of the Crown; and 
m) interviewing the individual. 


With the individual’s pleas of guilty on 26 March 2020, there was no longer a need to be 
concerned about his fair trial rights. But, by that stage, our process was well advanced 

to the point that we had reached provisional findings and a natural justice process was 
underway on these findings. Public and adversarial hearings would have been incompatible 
with the substantial engagement we had already undertaken and sharing of the provisional 
findings, and necessitated a further extension of the reporting deadline. In any event, the 
ongoing requirement to protect confidentiality in respect of the practices of intelligence and 
security agencies would have continued to limit the potential scope of public hearings. 
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4.2 Engaging with Muslim communities 


Engaging with affected whanau, survivors and witnesses of the terrorist attack was at 

the forefront of our thinking. We extended an invitation to affected whanau, survivors 
and witnesses to meet with us privately, on their own terms, and when they were ready to 
do so. The Royal Commission was established less than a month after the terrorist attack 
and it was important not to rush people who were still grieving and coming to terms with 
what had happened. We also wanted to respect religious practices such as the ‘Iddah 
grieving period, Ramadan, Eid al-Fitr, Dhul Hajjah, Eid al-Adha, Hajj pilgrimage and 
Muharram. We met with the Imams from Masjid an-Nur and the Linwood Islamic Centre, 
the Christchurch Muslim Liaison Group, the Linwood Islamic Charitable Trust and the 
Muslim Association of Canterbury. On occasion, we attended Jumu’ah at the Linwood 
Islamic Centre and Masjid an-Nur. We were able to speak to all those affected whanau, 
Survivors and witnesses who expressed a wish to talk to us, whether they resided in 

New Zealand or were overseas. 


Many of those closely affected by the terrorist attack invited us into their homes, sharing 
their grief as well as their hospitality with us. We were deeply humbled and privileged 

to do so. We were also assisted in these discussions by Aarif Rasheed and his team from 
JustCommunity, a legal, cultural awareness and advocacy consultancy group, and 

Deborah Lemon of Navigate Your Way Trust, a service provider helping people find pathways 
to housing and other services. Together they assisted us to engage with over 130 families 
affected by the terrorist attack. We are extremely grateful to those who agreed to meet with 
us. The stories they shared about their experiences before, during and after the terrorist 
attack gave us valuable insight which has deeply enriched this report. We hope we have 
adequately reflected what they told us. Their evidence is reflected throughout this report, 
and in our companion publication What we heard from affected whanau, survivors and 
witnesses. 


We also met with, and attended events at the invitation of, Muslim organisations including 
Auckland University Muslim Students’ Association, Auckland University of Technology Muslim 
Students’ Association, Federation of Islamic Associations of New Zealand, Islamic Ahlulbayt 
Foundation of New Zealand, Islamic Council of New Zealand, Islamic Women’s Council of 
New Zealand, Masjid al-Huda/Dunedin Islamic Centre, New Zealand Muslim Association, 
North Shore Ahlulbayt Centre Hussainiya, Otago Muslim Association, Pakuranga Hussainiya, 
South Auckland Muslim Association, UMMA Trust and the Working Together Group. 
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At the beginning of our process, and to meet our Terms of Reference, we established a 
Muslim Community Reference Group made up of 37 members.® This was to ensure that we 
had access to a diverse range of opinions from Muslim communities and that people within 
those communities had access to us. A wide range of nominations were considered to 
determine the make-up of the group, which was designed to be as broadly representative 

as possible. Criteria for ensuring the right balance included gender, religious perspectives, 
ethnicity, age, geographical location and the member’s connections to their communities. 

It was important to us that we built trust with members, so they could have confidence in us. 
We put much thought and effort into building this relationship. We engaged throughout the 
inquiry with the Muslim Community Reference Group and met on nine occasions. 


4-3 Community and interest groups 


We met with, or heard from, many community and interest groups and non-government 
organisations who held information useful to our inquiry. We met with representatives 
including from the Dunedin Abrahamic Interfaith Group, Foundation against Islamophobia 
and Racism, Purapura Whetu (mental health and social services Christchurch), the 
Refugee Council of New Zealand, the Religious Communities Leadership Forum and the 
Religious Diversity Trust Aotearoa. 


We also met with representatives including from the African Communities Forum, Jewish 
Council, Migrant Action Trust, Multicultural Council of Wellington, New Zealand Asian 
Leaders, New Zealand Indian Central Association, Somali Education and Development Trust, 
Te Runanga o Ngai Tahu, Third Culture Minds: Refugee and Migrant Youth Mental Health 
Charitable Trust and Transparency International. 


4.4 Integrity agencies 


We met on a number of occasions with the Chief Human Rights Commissioner, the current 
and some former Race Relations Commissioners and staff of the Human Rights Commission. 


We also engaged with the Privacy Commissioner, the Chief Ombudsman, the current and a 
former Auditor-General, the Chief Commissioner of Intelligence Warrants and the current and 
a former Inspector-General of Intelligence and Security. 


4.5 Submissions process 


In order to reach a broad range of New Zealanders and hear their views, we opened a 
submissions process from 1 July 2019 to 27 September 2019. The original closing date of 

31 July 2019 was extended to accommodate those people who needed more time to prepare 
their submission. 


5 For more information on the Muslim Community Reference Group, see https://christchurchattack.royalcommission.nz. 
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We received 1,168 submissions - 1,123 from individuals (including researchers and academics) 
and 45 from organisations. The total number of submissions includes submissions that were 
received verbally and then transcribed. 


The insights from the submissions are woven throughout the chapters of this report and 
summarised in our companion publication Summary of submissions. 


4.6 Public sector agencies 


We took a comprehensive approach to understand what Public sector agencies knew. We 
wrote to all 217 agencies in the wider New Zealand Public sector asking for information held 
about the individual, whether any concerns about safety and security had been raised by iwi/ 
Maori, ethnic or religious communities (including Muslim communities) with them and the 
role the agency has in New Zealand’s counter-terrorism effort. The vast majority of agencies 
did not hold any information on the individual, but we have been assisted in our inquiry with 
other information they provided. In Part 6: What Public sector agencies knew about the 
terrorist we set out what information agencies held about the individual. 


We issued numerous requests for information held by Public sector agencies. In some 
instances, we went back to agencies and asked for more information. For example, we 
received over 15,000 pages of evidence from New Zealand Police for analysis. By the end 
of our inquiry we had received over 73,500 pages of evidence and submissions. 


We summonsed current and former chief executives of Public sector agencies and 
interviewed many other current or former Public sector employees who worked in those 
agencies. Some of those current or former Public sector employees approached us in 
confidence. We took evidence from employees from all levels within the Public sector 
agencies, including front-line staff. 


Confidentiality orders (made under section 15 of the Inquiries Act 2013) ensured that 
individuals who appeared before us could be confident that they could give us their free 
and frank views. These orders also prevented coordination of evidence. We were pleased 
that individuals were forthcoming in expressing their views even when these differed from 
the positions of their agencies. From the relevant Public sector agencies themselves, we 
were looking for their organisation view rather than a system view. 
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4-7 Local government 


We met with the Mayors of Christchurch and Auckland, and councillors and council staff. 


4.8 Experts 


We spoke to many people with expertise in areas material to the inquiry, including experts in 
ethnic and religious communities. 


We are particularly grateful for the time made available to us by Lord Hogan-Howe QPM, 
former Commissioner of the Metropolitan Police Service (Greater London area) from 2011 
to 2017, and John McKinnon CNZM QSO, former Chief Executive of the Ministry of Defence 
from 2006 to 2012 and Director of the External Assessments Bureau from 1995 to 2001. 
Their perceptive comments and advice helped our thinking. 


We met with New Zealand’s intelligence and security and law enforcement counterparts, 
academics and experts in Australia, Norway, the United Kingdom and the United States of 
America. These meetings increased our understanding of right-wing extremism, lone actor 
terrorists, the lessons learned by countries that have experienced similar terrorist attacks 
and the challenges facing other counter-terrorism systems. 


We also consulted a range of subject matter experts within New Zealand: 


a) Dr Elaine Barrington-Ward, a Senior Medical Officer and Clinical Leader in the 
Endocrinology and Diabetes Department at Wellington Hospital, an expert in steroid 
and testosterone use. 


b) Ben Elley, an expert in online radicalisation and the far right. 

C) Te Maire Tau, Upoko (leader) of Ngai Taahuriri (tribal authority for Christchurch). 

d) A New Zealand Police Armourer, who provided advice on firearms-related issues. 

All of the people referred to in our website updates - and others who requested they not 


be listed - provided valuable insights and expertise to our inquiry. 


4.9 Members of Parliament 


We interviewed several current and former members of Parliament who have held 
ministerial portfolio responsibilities in relation to national security and the intelligence 
and security agencies. 
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4.10 The individual 


Before the individual entered pleas of guilty, our engagement with him through his then 
lawyers had been limited and formal in nature, as he was then facing trial. After he had 
pleaded guilty to all the charges he faced, we approached the individual, through his then 
lawyers, to see if he was prepared to talk to us. He was. Given our obligation to make all 
reasonable inquiries into the issues on which our Terms of Reference required findings and 
recommendations, we saw an interview with the individual as appropriate. 


The individual was (and remains) detained in Auckland Prison. The facilities available for 
the interview in Auckland Prison were of limited size, with room for only three people 
other than the individual. He had counsel present. This left space for only the Chair of 
the Royal Commission and counsel assisting. The interview took place on 24 June 2020. 
There was an audio link so the Member of the Royal Commission and officers could join 
the interview. 


We did not have the practical ability to compel the individual to talk to us. This was 
because the penalties under the Inquiries Act for not responding appropriately to a witness 
summons are inconsequential when compared to the penalties he faced at sentencing. 

So, his participation was voluntary. The individual did not wish to give his evidence on 
oath or affirmation. We did not press that issue. 


We had reservations about some aspects of what he told us but much of it was 
plausible. We will refer to his evidence in more detail later in this report, particularly in 
Part 4: The terrorist. 


4.11 Our engagement by numbers 


Between April 2019 and September 2020, we held more than 395 meetings with affected 
whanau, survivors and witnesses, community organisations and individuals, Public sector 
agencies, integrity agencies, local government, members of Parliament, experts, academics 
and international representatives. Many of the Public sector employees interviewed were 
summonsed to appear and provided their evidence under oath or affirmation. We issued 
more than 47 summonses to current and former Public sector employees to appear before 
us. More than 330 section 15 orders were also issued to Public sector agencies and people 
to ensure the evidence gathering and natural justice process was rigorous. 


4.12 Types of evidence received 


The evidence we received included stories from community members, reports and reviews, 
Cabinet papers, ministerial briefings, interview transcripts, meeting notes, email records, 
police statements, audio recordings, financial reconstructions, credit card transactions, 
medical assessments, social media reports, information relied on by international media 
outlets, maps, photographs, videos, newspaper clippings, examination of physical evidence, 
international partner information and telecommunication records. 
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4.13 Internal deliberations 


Our internal deliberation process largely ran in parallel to our information and evidence 
gathering process. It included analysing the evidence, conducting research, preparing 
internal memoranda, holding workshops within the Royal Commission and pursuing 
additional lines of inquiry when appropriate. 


Officers of the Royal Commission were encouraged to offer their unique perspectives on 
the complex issues that had to be resolved. This robust approach helped to develop and 
refine our thinking and, ultimately, paved the way to finalising the content of the report. 


4.14 Due diligence process 


We undertook a comprehensive due diligence process with those who had participated in 
the inquiry. This included: 


a) an iterative natural justice process; 

b) fact-checking; 

c) reviews for sensitive and classified information; and 
d) obtaining consent to use quotations. 


We discuss these aspects of our process below. 


An iterative natural justice process 


Although we could not make decisions about civil, criminal or disciplinary liability, we 
could make unfavourable (adverse) findings against people or Public sector agencies. 
Section 14(2) and (3) of the Inquiries Act states that, if we intended to make findings 
against a person or agency, we had to make sure that person or agency understood the 
reasons for the unfavourable finding and had a fair opportunity to respond before we 
made our final decision. We followed a natural justice process that applied not only to 
provisional unfavourable findings, but also to any unfavourable statements. This process 
generally included: 


a) telling people and Public sector agencies if we intended to make unfavourable findings or 
unfavourable statements about them; 


b) giving those people and Public sector agencies an opportunity to review the information on 
which the proposed unfavourable finding or statement was based, and to respond; and 


c) telling people, community groups or organisations and Public sector agencies mentioned 
in the draft report that they were going to be mentioned. 


In some instances, changes to our draft report required additional natural justice processes 
to be carried out. 
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Fact-checking 


As noted above, we received over 73,500 pages of evidence and submissions. This large 
volume of material meant there was, potentially, scope for factual inaccuracies in our report. 
To ensure we produced a factually accurate report, we requested those whose evidence or 
submissions had been relied on in the report (whether Public sector agencies, community 
groups, individuals or otherwise) to check the accuracy of parts of the report that were 
based on their evidence and submissions. No one received a full copy of the draft report. 


The fact-checking aspect of our due diligence process was time-consuming. However, 
undertaking this process means our whole report has been fact-checked by relevant 
individuals and organisations. 


Reviews for sensitive and classified information 


Our Terms of Reference precluded the disclosure of sensitive information in our report. 

We have been anxious throughout our inquiry to provide a report that can be published in 
full without redactions or suppressed sections. Accordingly, as part of our due diligence 
process, we asked the intelligence and security agencies to identify any sensitive information 
in the draft report content. 


Broadly speaking, sensitive information relates to the operations of the intelligence 

and security agencies that, if it was released, would prejudice the security, defence, or 
international relations of New Zealand or would endanger the safety of any person. We 
undertook a comprehensive process to ensure the report did not contain any sensitive 
information. That process involved agency nominees reviewing the report for sensitive 
information and providing us with advice, asking Public sector agencies for their comments 
on sensitive information issues and holding a hearing to determine any outstanding issues. 
We decided how the sensitive information issues raised at the hearing should be resolved, 
including by sanitisation. 


Sanitisation requires a restatement of information so as to limit the potential for harm to 
national security. Very little information required sanitisation. Such sanitisation as has 
occurred has not altered the substance of what we wanted to say. 


Our Terms of Reference did not prevent the publication of classified information. Instead, 
we had discretion whether to publish such information. We asked Public sector agencies 
to identify any classified information contained in the draft report during the due diligence 
process and explain why they thought this should not be published. Some Public sector 
agencies considered that the report contained classified information that should not be 
published, at least in the way it was set out in the draft report. 
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To decide whether we would publish classified information in our report, we followed a 
broadly similar process to that undertaken in relation to sensitive information. All issues 
that arose were able to be dealt with by sanitisation or determining that the information 
could be included as is. The sanitisation processes did not affect the substance of what we 
wanted to say. 


A substantial amount of information previously classified as Secret or Top Secret is included 
in our report. 


Obtaining consent to use quotations 


As noted above, we gathered information and evidence in private. We gave all witnesses, 
and those who made submissions to us, other than the individual, the assurance that what 
they provided to us would remain confidential unless they later provided their consent for the 
material to be disclosed. We considered this essential in order to honour the assurance of 
confidentiality that we had given to participants. 


4.15 Concluding comments 


We acknowledge that the requirement to proceed in private created some limitations. 
Ideally, we would have had the opportunity to test evidence and conclusions, which a 
public process might have provided. For the reasons discussed earlier, that was simply 
not practical. We have worked to secure the confidence of the Muslim organisations and 
individuals with whom we have engaged. We have also done our best to test the evidence 
and our conclusions. As to whether we have been successful, our report must speak for 
itself. 
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5.1 Structure 


The report covers a wide range of topics, some of which are only loosely connected. 
As well, some of the issues are very specific whereas others recur throughout the report. 


The first two Parts (Part 2: Context and Part 3: What communities told us) deal with 

issues that are relevant to everything that follows in the report. The next three Parts 

(Part 4: The terrorist, Part 5: The firearms licence and Part 6: What Public sector agencies 
knew about the terrorist) deal in forensic detail with specific aspects of our inquiry. 

Part 7: Detecting a potential terrorist provides a bridge to the more evaluative 

Part 8: Assessing the counter-terrorism effort. Part 9: Social cohesion and embracing 
diversity is a similarly evaluative exercise - this time in respect of Public sector involvement 
in social cohesion and encompassing the New Zealand’s approaches to hate crime and 

hate speech. 


The findings we make are incorporated in the Parts in which the relevant issues are 
addressed. We make our recommendations, separately, in Part 10: Recommendations. 


5.2 Anonymisation 


Our Terms of Reference required us to make findings and recommendations about Public 
sector agencies. We are, therefore, concerned with actions taken at an agency or system 
level. We do not consider it necessary to name any current or former Public sector 
employees other than chief executives or deputy chief executives. 


Other than experts who assisted the inquiry, we do not think it is appropriate to name private 
individuals whose names are not already in the public domain, which is the case with the 
individual’s mother and sister, Sharon and Lauren Tarrant, and Peter Breidahl. Naming other 
private individuals in our report may lead to undue public attention and possible harm. 


Consistent with this policy, we have used the pronouns “they” and “them” in place of “he”, 
“she”, “him” and “her” and the adjective “their” instead of “his” or “her”. This has been to 
avoid providing unnecessary identifying detail in relation to the people whom we spoke to or 
whose actions we discuss. 


5.3 Distressing content 


A note of warning, this report contains material that is at times confronting, particularly to 
those affected by the 15 March 2019 terrorist attack. We provide visual warning prior to the 
most challenging sections. Some people may wish to avoid these parts. 
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Glossary 

Term Definition 

EFTPOS Acronym for electronic funds transfer at point of sale. An 
electronic payment system. 

hui Te reo Maori (Maori language) term for a meeting or gathering. 

hussainiya An Arabic term for a congregation hall for Shia (a denomination 


of Islam) commemoration ceremonies. 





incendiary device 


A device designed to cause fires. 

















Jumu’ah Jumu’ah is the prayer that occurs at solar noon on Fridays. 
magazine A device that contains ammunition to feed into the chamber of 
a firearm. 
masajid An Arabic term for more than two masjid. 
masjid An Arabic term for a mosque, the Muslim place of worship. 
In Arabic, masjid literally translates to “place of prostration 
(in prayer)”. 
masjidain An Arabic term for two masjid. 





Masjid an-Nur 


The Arabic term for the an-Nur Mosque. 





Public sector agency 


In general, an organisation that works for the government of 
New Zealand. 


In this report, “Public sector agencies” means the 217 
organisations listed in the appendix. 














scabbard A sheath or holster for a knife. 

shuhada An Arabic term for the plural “martyr”. The term shuhada is 
used in this report to refer to people who died as martyrs asa 
result of the terrorist attack on 15 March 2019. 

solar noon The time of day when the sun appears to have reached its 
highest point in the sky. 

whanau Te reo Maori (Maori language) term for family. 
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Chapter 1: Introduction 





In this Part we explain some of the contextual issues and concepts that provide a background 
to our report. 
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Chapter 2 provides a brief overview of the New Zealand context. For those not familiar 
with New Zealand it provides a brief explanation of New Zealand’s history, constitutional 
framework and diverse demographics. 


In chapter 3 we describe the international and domestic human rights framework. This 
provides context for when we consider issues related to human rights throughout the report. 


Chapter 4 provides an overview of New Zealand’s national security system and the 
counter-terrorism effort. This introduces some concepts, Public sector agencies and 
governance structures that are examined later in the report. 


In chapter 5 we explain the main concepts and terms associated with extremism. We 

outline the spectrum of harmful behaviours discussed in later Parts and focus on the key 
characteristics of right-wing extremism. This is of relevance to understanding the individual’s 
behaviour and the activities of the Public sector agencies tasked with countering violent 
extremism and terrorism. 
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Chapter 2: The New Zealand context 


New Zealand is situated in the southwest Pacific Ocean and is geographically isolated 
from the rest of the world. New Zealand’s population was just over 5 million in the year 
2020, with its people spread primarily over its two largest islands, the North and 

South Islands. Situated in the North Island, Auckland is the largest city and home to one 
third of the country’s population, with around 1.66 million inhabitants. Also in the North 
Island is New Zealand’s capital, Wellington, with a population of around 500,000 in the 
wider region. This is followed by Christchurch in the South Island, which has a population 
of around 385,500. 


2.1. The Maori - Crown relationship 


First contact between Maori and Tauiwi occurred in the 17th century. Through the late 

18th century and early 19th century, European traders, missionaries and later British settlers 
arrived in New Zealand. The British government had no legal authority to control the 
activities of settlers until the signing of Te Tiriti o Waitangi in 1840." 


Te Tiriti o Waitangi was signed by Maori and the British Crown in 1840. It is New Zealand’s 
founding document.” With the signing of Te Tiriti o Waitangi, New Zealand became a British 
Colony and it paved the way for further settlement of British citizens. Te Tiriti o Waitangi 
came with a duty on the part of the Crown to protect Maori rights and property. There were 
(and still are) different interpretations of what was agreed in the Maori and English texts 

of Te Tiriti o Waitangi. A significant difference of interpretation is whether Maori ceded 
sovereignty (as in the English text) or whether they agreed to British governance over their 
lands (kawanatanga in the Maori text) but retained self-determination (tino rangatiratanga, 
in the Maori text). The repeated failures on the part of the Crown to uphold its commitments 
under Te Tiriti o Waitangi have caused widespread and ongoing harms.° 


From 1840 the pace of migration saw the Tauiwi population grow rapidly. It soon 
outnumbered Maori. By 1874 Maori made up less than one-tenth of the population and this 
remained the case for a century. 





Office of Treaty Settlements Ka tika @ muri, ka tika @ mua / Healing the past, building a future (2018). 
Office of Treaty Settlements, footnote 1 above. 


3 Rebecca Wirihana and Cherryl Smith “Historical Trauma, Healing and Well-Being in Maori Communities” (2014) 3(3) MAI Journal; 
Human Rights Commission Human Rights and the Treaty of Waitangi: Human Rights in New Zealand (2010); TK Kingi “The Treaty 
of Waitangi: A framework for Maori health development” (2017) 54(1) Journal of Occupational Therapy. 


a 


Ministry for Culture and Heritage Maori and European population numbers, 1838-1901 (29 August 2014) https://nzhistory.govt.nz/ 
media/photo/maori-and-european-population-numbers-1838-1901. 


68 





QO 
° 
3 
= 
@ 
x 
= 


The colonisation of New Zealand led to Maori incurring widespread loss of land through 
practices in breach of Te Tiriti o Waitangi.> This included large-scale land confiscation.°® 
These confiscations occurred during and after the New Zealand Land Wars, a series of battles 
prompted by conflict over land sales and interpretations of Te Tiriti o Waitangi. Through this 
period the Crown attempted to suppress Maori protest and self-determination, including 
through the use of excessive force.’ By 1930 Maori retained ownership of only six percent of 
land in New Zealand.°® 


The loss of land, warfare and imposition of laws, policies and practices designed to 
assimilate Maori? eroded Maori social structures and led to a loss of language and traditional 
knowledge.’° This has had enduring impacts on Maori health, wellbeing and access to 
resources, which are seen today in disparities across a range of indicators. 


Maori have sought resolution of grievances for the past 180 years and have demanded 
recognition of their Te Tiriti o Waitangi rights and tino rangatiratanga." The Maori-led 
movement in the latter half of the 20th century, together with Waitangi Tribunal claims and 
subsequent negotiated settlements with the Crown,” have contributed to the revitalisation 
of Maori language and culture and socio-economic development.” The principles of 

Te Tiriti o Waitangi form the basis of the ongoing relationship between Maori and the Crown. 


2.2 New Zealand’s constitutional arrangements 


New Zealand is a constitutional monarchy. The Sovereign (Queen Elizabeth II) is the head of 
state of New Zealand and is represented by the Governor-General. The Sovereign exercises 
certain powers and functions, acting on the advice of ministers.* The prime minister is the 
principal advisor to the Governor-General. 





Office of Treaty Settlements, footnote 1 above. 

Rebecca Wirihana and Cherryl Smith, footnote 3 above. 

Office of Treaty Settlements, footnote 1 above. 

Office of Treaty Settlements, footnote 1 above. 

For example, the Native Schools Act 1867, the Tohunga Suppression Act 1907. 


Leonie Pihama, Linda Tuhiwai Smith, Tessa Evans-Campbell, Ngaropi Cameron, Rihi Te Nana, Tania Mataki, 
Herearoha Skipper, Hinewirangi Kohu-Morgan and Kim Southey “Investigating Maori approaches to trauma informed care” 
(2017) 2(3) Journal of Indigenous Wellbeing. 


Mera Penehira, Alison Green, Linda Tuhiwai Smith and Clive Aspin “Maori and indigenous views on R & R: Resistance and 
Resilience” (2014) 3(2) MA/ Journal; Office of Treaty Settlements, footnote 1 above. 


The Waitangi Tribunal was set up in 1975 to consider contemporary claims of breaches of Te Tiriti o Waitangi. In 1985 its powers 
were extended to allow it to consider historical breaches dating back to 1840. 


Human Rights Commission, footnote 3 above. 


Department of the Prime Minister and Cabinet Cabinet Manual 2017 (2017). 
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The prime minister is the head of government. The executive branch of government consists 
of ministers and the public service. Ministers direct the executive branch of government, 
which makes decisions on government policies and proposes laws." 


Ministers are members of Parliament and are appointed by the Governor-General on the 
advice of the prime minister. Ministers are responsible for specific portfolios such as national 
security (Minister for National Security and Intelligence) or law enforcement (Minister of 
Police). Ministers are responsible for exercising the functions and powers provided for by 
their letter of warrant and as defined in legislation for their portfolios." 


Ministers collectively make decisions and determine government policy through the 

Cabinet decision-making process. Cabinet is the central government decision-making body. 
Issues will first be discussed at Cabinet committees before being considered by Cabinet. 
Cabinet committees are organised by subject areas (see Part 2, chapter 4 for a description 
of the Cabinet External Relations and Security Committee).”” 


As well as these collective responsibilities, ministers have individual responsibility for their 
portfolios. Ministers set the policy direction and priorities for their Public sector agencies 
but are generally not involved in day-to-day operations. They are, however, expected to 
answer to Parliament on matters relating to the policies and performance of the 

Public sector agencies within their portfolios and on public spending. Ministers are 
concerned not only with the short-term performance of Public sector agencies, but also with 
agency capability to continue to deliver government objectives in the longer term.” 


The formal relationship between ministers and the public service is governed primarily by the 
Public Service Act 2020 and the Public Finance Act 1989. Chief executives serve as the main 
point of contact between their agencies and ministers. As set out in the Cabinet Manual 
2077," officials are responsible for supporting ministers in carrying out their ministerial 
functions, for example, by developing and implementing policy and strategy within their 
ministers’ portfolios. They are expected to provide free and frank advice to their ministers 
and inform them of any significant developments within their portfolio. Officials must be 
politically neutral in their work. 





*S Department of the Prime Minister and Cabinet, footnote 14 above. 
6 Department of the Prime Minister and Cabinet, footnote 14 above. 
7 Department of the Prime Minister and Cabinet, footnote 14 above. 
7 Department of the Prime Minister and Cabinet, footnote 14 above. 


"9 Department of the Prime Minister and Cabinet, footnote 14 above. 
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New Zealand has a Mixed Member Proportional (MMP) electoral system, which was instituted 
in 1994. Under this system each person has two votes, one for their preferred political party 
and one for the preferred candiate in their electorate. Under a Mixed Member Proportional 
system, multi-party coalitions have been common. This requires political parties to 
compromise and cooperate in order to form a government. 
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The move to a Mixed Member Proportional system brought a number of changes to the 
functioning and performance of government in New Zealand. It reduced the dominance of 
the executive branch of government and expanded the scope for “more meaningful debate 
of the government policy”.*° This type of system requires that governments spend more 
time gathering support for their policies, which can slow down the decision-making process, 
but means public consultation is more likely to influence government policy.” A potential 
consequence of this is that in the bargaining process that comes with the development and 
maintenance of multi-party coalitions, it may be difficult to gain support for policies that are 
unpopular with a significant proportion of voters. 


2.3 Immigration and increasing diversity 


Te Tiriti o Waitangi established a bicultural foundation for New Zealand, but through the 
Crown’s responsibiliy to govern and make laws for all New Zealanders it also established a 
foundation for multiculturalism.” 


Until the late 20th century most migrants to New Zealand were of European origin.” 
As recently as 1991 only eight percent of the New Zealand population reported that they 
belonged to an ethnic group other than Maori or European. 


New Zealand has long had strong links with the Pacific Islands and substantial waves of 
migration have led to a large Pasifika population in New Zealand. In 2018 about eight percent 
of New Zealand’s population were Pasifika. 





°° Geoffrey Palmer and Matthew Palmer Bridled Power: New Zealand Government Under MMP (Oxford University Press, Auckland, 
1997) at page 15. 

”" Geoffrey Palmer and Matthew Palmer, footnote 20 above. 

2 Human Rights Commission, footnote 3 above. 


3 Paul Spoonley “New Diversity, old anxieties in New Zealand: the complex identity politics and engagement of a settler society” 
(2015) 38(4) Ethnic and Racial Studies. 
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Over the last few decades, changes in immigration policy and consequential increases in 
immigration have seen New Zealand become a more diverse nation. By 2011, New Zealand 
was listed as the fifth most ethnically diverse country within the Organisation for Economic 
Co-operation and Development (OECD),” with one in every four residents in New Zealand 
born overseas.”° As at the 2013 Census, New Zealand was home to 213 ethnicities and 

160 languages. The change in New Zealand’s ethnic composition has happened within 

a generation. Auckland is now one of the most diverse cities in the world, more so than 
London or New York.” New Zealand’s ethnic diversity is expected to continue increasing.” 
By 2038, 34 percent of the New Zealand population will be non-European (compared with 
29.8 percent as at the 2018 Census).”? The table below shows the proportions of ethnic 
groups as at the 2013 and 2018 Censuses. 


Figure 2: Ethnic groups in New Zealand (2013 and 2018) 


Ethnic group 


European 
Maori 
Asian 


Pacific peoples 


Middle Eastern/ 
Latin American/African 


Other ethnicity 


° 
3 


20 30 40 50 60 70 80 
Percent 


[2013 [2018 





*4 Paul Spoonley, footnote 23 above. 
2. 


a 


Mai Chen Superdiversity Stocktake: Implications for Business, Government and New Zealand (Superdiversity Centre, 2015). 


26 The Royal Society of New Zealand Our Futures Te Pai Tawhiti: The 2013 Census and New Zealand’s Changing Population (2013) 


at page 6. 


2 


xa 


International Organization for Migration World Migration Report 2015 (Geneva, 2015) https://publications.iom.int/system/files/ 
wmr2015_en.pdf. 


28 Stats NZ projections, http://archive.stats.govt.nz/browse_for_stats/population/estimates_and_projections/ 


NationalEthnicPopulationProjections_MR2013-2038.aspx. 


*8 Stats NZ projections, footnote 28 above. 
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New Zealand has an ageing population and it is estimated that by 2051, one in every four 
people will be aged 65 years and over. They will be supported by an increasingly diverse 
workforce. 


New Zealand’s demographic changes have also contributed to increased religious diversity. 
Of those who do follow a religion, Christianity remains the single largest religion, with 
Catholicism now the largest Christian denomination.3° The number of New Zealanders 
identifying with Buddhism, Hinduism, Islam and Sikhism has also increased." Secularisation 
and the reduction in religious affiliation amongst European New Zealanders has also 
contributed to a change in New Zealand's religious make-up. 





3° Stats NZ, 2013 Census. 
3' Stats NZ, footnote 30 above. 


73 


———" 
Chapter 3: Overview of New Zealand’s international 
and domestic human rights framework 


3.1. Introduction 


Using violence to cause terror in a population to pursue political goals is inconsistent 

with the rights and inherent worth of those targeted and is contrary to democracy. But 
mistargeted and disproportionate state responses to threats of terrorism also have 
implications for human rights. So, states must carefully balance the need to protect public 
safety (which includes the right to life) with the preservation of individuals’ human rights. 
The tension between these two requirements is a recurrent theme in this report. 


This chapter: 

a) sets out the history of the Universal Declaration of Human Rights; 
b) describes the different types of human rights; 

c) describes the international and domestic human rights framework; 
d) discusses how New Zealand protects human rights; and 


e) explains how human rights are relevant to our inquiry. 


3.2 Historic context - the 1948 Universal Declaration of 
Human Rights 


On 10 December 1948, the General Assembly of the recently created United Nations approved 
the Universal Declaration of Human Rights. The Universal Declaration of Human Rights 

sets out the human rights that the then international community recognised as being the 
universal entitlements of all people. These encompass both civil and political rights, 
enabling people to participate in the civic and political life of their community and also 
economic, social and cultural rights, which recognise that without freedom from fear and 
want, people cannot flourish. 


Forty-eight states voted in favour of the Universal Declaration of Human Rights. Support 
came from all continents of the globe and from states with different political, cultural and 
religious systems. New Zealand played a key role in the drafting of the Universal Declaration 
of Human Rights and supported the inclusion of economic, social and cultural rights. 


The immediate aim of the Universal Declaration of Human Rights was to promote human 
rights by teaching and education. Its long-term goal was to establish mechanisms that 
would secure the recognition and observance of human rights. 


Human rights concepts recorded in legislation or reports are of limited significance unless 
they are valued by the population. Each generation needs to renew its commitment to, and 
faith in, human rights. That, in turn, requires strong political leadership to remind all of the 
benefits and intrinsic merit of human rights. 
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For this reason, the United Nations’ Vienna Declaration and Programme of Action 
recommended that states develop specific programmes and strategies for ensuring the 
widest human rights education and the dissemination of public information.* 
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Later in this chapter, we discuss the absence in New Zealand of a coherent programme to 
deliver such programmes within schools, adult education and public sector settings. 


3.3. The types of human rights 


Human rights can be grouped into: 


a) First and second-generation human rights: civil and political rights (such as the right 
to life and freedom of expression and religion) and economic, social and cultural rights 
(such as the right to work and the right to education). 


b) Third-generation human rights: rights that are collectively held by the community, such 
as the right to a clean environment and the right to sustainable development. 


At the international level, since 1948, it has been consistently stated that first and 
second-generation human rights are “universal, indivisible, interdependent and 
interrelated”.3 Human rights are universal because they are enjoyed by all human beings. 
And they are expected to be recognised and given effect to regardless of a state’s political 
system (though “national and regional particularities and various historical, cultural and 
religious backgrounds must be borne in mind”).3* Human rights are indivisible in the sense 
that no particular category of right is more important than the other and neither set of rights 
can operate without the existence of the other. They are interrelated and interdependent. 


Recognition of third-generation human rights at the international and domestic level 

has been slow. Many states’ constitutional systems now recognise them and within the 
international system they are given partial effect through issue-specific instruments (such as 
the United Nations’ treaties on climate change and the environment). 





%* United Nations Vienna Declaration and Programme of Action (1993) at Part Il, paragraph 81. 
33 United Nations, footnote 32 above at Part |, paragraph 5. 


34 United Nations, footnote 32 above at Part |, paragraph 5. 
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There are some important distinctions between the different categories of human rights. 
For example, while civil and political rights are expected to be given full and immediate 
implementation by states, it is accepted that some economic and social rights can only be 
progressively realised over time, depending on the resources available to each state.* 


3.4 International and domestic human rights systems 


There is a complex web of international and domestic mechanisms that give effect to human 
rights. In addition to the United Nations and regional human rights systems, most states 
have adopted human rights in their domestic constitutions, legislation and government 
policies. Each state does so in accordance with its constitutional and legal systems as well 
as its social, cultural and political systems. 


United Nations human rights system 


The Universal Declaration of Human Rights is not a legally binding human rights instrument.°*° 
Instead it sets out a common understanding of important human rights, as accepted by 

the United Nations member states. The United Nations system has created numerous 
general and specific human rights instruments, including binding international treaties and 
non-binding declarations and resolutions. This work represents a substantial contribution 

to global human rights, underscoring the universal nature of human rights and progressively 
affirming practices and mechanisms that reinforce human rights standards as common 
standards to be observed by, and within, all states. 


Since 1948, the United Nations has created a series of human rights treaties. While 
treaties are legally binding under international law, in New Zealand the executive branch 
of government cannot change New Zealand’s domestic law by becoming party to a treaty. 
If the obligations being assumed under the treaty cannot be performed under existing 
law, legislation will be required. 


The two most important United Nations human rights treaties are the International 

Covenant on Civil and Political Rights (1966) and its companion the /nternational Covenant 
on Economic Social and Cultural Rights (1966). New Zealand has ratified both of these 
treaties, with some reservations, and has incorporated some of the rights they recognise into 
domestic law. 





35 See Office of the United Nations High Commissioner on Human Rights Frequently Asked Questions on Economic, Social and 
Cultural Rights Fact Sheet No 33 (2008). 


3° There are many other non-binding declarations that the United Nations has agreed to, such as the Declaration on the Rights of 
Indigenous Peoples. 
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Both treaties require the right of non-discrimination to be respected. This means that all 
civil, political, economic, social and cultural rights must be provided to all people without 
discrimination and, more generally, that no laws should unfairly discriminate against 
people. Among the grounds upon which discrimination is prohibited are “race, colour, sex, 
language, religion, political or other opinion, national or social origin, property, birth or 
other status”.*” Like the Universal Declaration of Human Rights, both treaties recognise that 
there can sometimes be conflicts between rights, or between rights and the public welfare, 
and that these conflicts may require that certain rights be limited. Both treaties establish 
mechanisms and standards by reference to which such limits can be assessed. 
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The United Nations has adopted a range of human rights instruments: 

a) Convention on the Elimination of all forms of Racial Discrimination (1965). 

b) Convention on the Elimination of all forms of Discrimination Against Women (1975). 
c) Convention on the Rights of the Child (1989). 


d) International Convention on the Protection of the Rights of All Migrant Workers and 
Members of their Families (1990). 


e) Convention on the Rights of Persons with Disabilities (2006). 


f) International Convention for the Protection of All Persons from Enforced Disappearance 
(2006). 


Each of these instruments is supervised by a committee of experts that undertakes regular 
reviews of the human rights performance of member states. These committees are often 
allowed to receive complaints from individuals that their rights have been breached by 

a state. New Zealand has signed up to all these instruments except for those related to 
migrant workers and enforced disappearance. 


An important feature of the United Nations human rights framework is the “periodic 
reporting” mechanism. Each of the United Nations human rights treaties requires its 

expert committee to monitor individual countries’ compliance with the obligations in the 
relevant treaty on a periodic basis, typically every three to five years, depending on which 
treaty is involved. The periodic reporting mechanism requires individual countries to 
submit reports indicating how they are complying with the treaty and what measures they 
are taking to improve compliance. The expert committee considers the country report as 
well as any material provided by non-governmental organisations and publicly available 
material. It then questions country representatives during an open committee session. The 
committee will then issue a report on compliance, noting areas for improvement and making 
recommendations. 





37 United Nations International Covenant on Civil and Political Rights (1966) at Part Il, Article 2. 
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In addition the Universal Periodic Review involves a review of the human rights records of all 
United Nations member states, every five years. The Universal Periodic Review provides the 
opportunity for each state to declare what actions they have taken to improve the human 
rights situations in their countries and to fulfil their human rights obligations. It is designed 
to ensure equal treatment for every country when their human rights situations are assessed. 
The aim of this mechanism is to improve the human rights situation in all countries and 
address human rights violations wherever they occur. 


Regional human rights systems 


Another important development has been the creation of regional human rights systems. 
Such systems exist in Europe (the European Convention on Human Rights, which applies to 
47 European states), North and South America (the American Convention on Human Rights, 
which applies to 23 states) and Africa (the African Charter on Human and Peoples’ Rights, 
which applies to 53 states). 


The only region without an international human rights system is the Asia Pacific region. 
There have been concerted efforts over the years to create an Asia Pacific regional human 
rights system and, at other times, a Pacific regional human rights system. Those efforts 
have not been successful. 


Limitations on rights and freedoms are allowed 


An important feature of international and domestic human rights systems is the recognition 
that human rights can be subject to reasonable limits. The Universal Declaration of 

Human Rights permits limits to be placed on human rights “for the purpose of securing 

due recognition and respect for the rights and freedoms of others and of meeting the just 
requirements of morality, public order and the general welfare in a democratic society”.** In 
addition, the Universal Declaration of Human Rights states that the human rights recognised 
by it cannot “be exercised contrary to the purposes and principles of the United Nations”.29 


Over the last half century, political systems and courts in many states have developed 
guidelines and rules about what limits on human rights are acceptable. We will consider 
how New Zealand has grappled with limits on human rights when we consider section 5 of 
the New Zealand Bill of Rights Act 1990 below. 


Not just about the obligations of states 


An important development in the realisation of human rights over the last three decades 
has been the acceptance that for human rights to be universal, obligations must lie not 
only on states, but also on significant private actors (organisations and individuals) within 
those states. 





3® United Nations Universal Declaration of Human Rights (1948) at Article 29.2. 


39 United Nations, footnote 38 above at Article 29.3. 
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For example, in the last 10 years, human rights frameworks to guide the business 

community have been established by the United Nations and in regional human rights 
systems. The best-known framework is the United Nations’ Guiding Principles on Business 
and Human Rights.*° This recognises that businesses have a responsibility to respect human 
rights and should work with states to ensure they are complying with human rights principles 
in the course of their business activities. 
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Separately, because the human rights of particular members of a community can be 
threatened by other members of the community, states must proactively protect the human 
rights of threatened community members. A state that exposes a threatened community to 
unacceptable risk by not taking appropriate intervention measures breaches its own human 
rights obligations. In this way, the human rights obligations of states also indirectly apply to 
the behaviour of private actors. 


Universal acceptance, but not necessarily universal implementation 


An important feature of the success of the international human rights system has been the 
near universal acceptance of the core human rights principles. For example, 173 states are 
party to the /nternational Covenant on Civil and Political Rights, while 171 states are party to 
the /nternational Covenant on Economic Social and Cultural Rights. There are 182 states that 
are party to the Convention on the Elimination of Racial Discrimination. 


Of course, agreeing to an international human rights instrument is not a guarantee that 
states are necessarily committed to full implementation of those obligations. A common 
criticism of the international human rights system is that many violations of human rights 
have occurred despite that system and many states take daily actions that are inconsistent 
with human rights principles. Those criticisms are, factually, correct. But they miss an 
essential point - one of the most important contributions of the international human rights 
system is that it establishes a framework and set of standards to measure the performance of 
states. Most states have accepted that they can and should be judged by these standards. 


Different mechanisms have evolved over the decades to ensure that states effectively 
implement their international human rights obligations. Other mechanisms allow for state 
compliance with these instruments to be supervised and assessed. The various mechanisms 
respond to the needs and interests of different states and are designed to ensure that, 

over time, states improve the extent to which they recognise and abide by human rights 
instruments and principles. 





4° United Nations Guiding Principles on Business and Human Rights (2011). 
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3.5 New Zealand’s human rights systems 


New Zealand’s human rights systems include laws that give effect to international human 
rights instruments. In addition, a number of practices have been adopted that are additional 
to legislation and assist in the better recognition and protection of human rights in 

New Zealand. 


While New Zealand accepted the Universal Declaration of Human Rights in 1948 and became 
party to the two international human rights treaties in 1966, it was slow to give effect to them 
in domestic law. Initially there was little specific legislative recognition or public awareness 
of the rights and obligations outlined in these instruments. The development of enforcement 
mechanisms and the improvement in public awareness within New Zealand remain a work 

in progress. 


What is the legal impact of the United Nations human rights instruments on 
New Zealand law? 


In New Zealand, as in many other countries that adopt the common law legal system, 
an international human rights instrument becomes part of the domestic law only if 
this is provided for by Parliament. In New Zealand, none of the international human 
rights instruments has been completely adopted into domestic law. Only parts of each 
international human rights instrument have been included in New Zealand law. 


New Zealand courts are prepared to have regard to the international human rights 
instruments while undertaking their usual tasks of interpreting and applying the law, even if 
the instrument has not been adopted through legislation. But where New Zealand domestic 
law is inconsistent with an international human rights instrument, New Zealand domestic law 
prevails, and the courts must give effect to the domestic law, not to the international human 
rights instrument. 


Many international human rights instruments allow individuals who claim to have been 
adversely affected by a law, policy or state action to bring complaints to a United Nations 
human rights body asking it to declare that their rights have been breached. Where a breach 
has occurred, the human rights body may suggest action that the state should take to remedy 
the situation. While the decisions of those United Nations complaints mechanisms are not 
legally binding on the state, the expectation is that the state will seek to give effect to those 
decisions. This can impact on which international human rights instruments New Zealand is 
willing to give effect to through domestic law. It can indirectly influence what law will and 
will not be enacted by Parliament. 
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New Zealand’s human rights laws 
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New Zealand gives effect to international human rights instruments through domestic law in 
two ways: 


a) by recognising specific human rights principles in specific laws, such as the right of 
children with disabilities to receive an education in the same setting as children not living 
with disabilities (provided by section 34 of the Education and Training Act 2020); and 


b) through two general human rights laws - the Human Rights Act 1993 and the 
New Zealand Bill of Rights Act 1990. 


Despite its name, the Human Rights Act only focuses on one human right, the right to be free 
from discrimination. It prohibits discrimination on many grounds. The prohibited grounds 
of discrimination include sex, race, colour, religion, sexual orientation, disability and marital 
status. In the case of Public sector agencies, the Human Rights Act prohibits discrimination 
except where different treatment can be justified in a free and democratic society.” In 

the case of non-Public sector agencies, the Human Rights Act prohibits discrimination on 
those grounds in areas such as employment, providing goods and services and providing 
accommodation. This means there are greater non-discrimination obligations on 

Public sector agencies than on non-Public sector agencies such as private businesses. 


The New Zealand Bill of Rights Act is broader. Its focus is on the protection of civil and 
political rights. It protects: 


a) the right to life and security of the person; 

b) the right to political participation; 

c) the rights of free expression, association, religion and thought; 
d) the right to be free from discrimination; 

e) the right to enjoy a minority culture; and 

f) many rights related to the criminal justice system. 


Notably absent from the New Zealand Bill of Rights Act are economic, social and cultural 
rights (such as the right to education, the right to housing and the right to social welfare). 
Also absent are the right to privacy, the right to property and third-generation rights such 
as the right to a clean environment. 





*" For an illustration of how this works in practice, see the decision of the Court of Appeal, Ministry of Health v Atkinson [2012] 
NZCA 184, [2012] 3 NZLR 456, where the Court held that a Ministry of Health policy affecting payments to the caregivers of 
disabled children was discriminatory and was not justified as it encroached on the right to be free from discrimination to an 
extent that was greater than was necessary to give effect to the Ministry’s policy objectives. 
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Consistently with the Universal Declaration of Human Rights, section 5 of the New Zealand 
Bill of Rights Act allows rights and freedoms to be limited where that is demonstrably 
justified in a free and democratic society. Any limitation must be able to be shown to be 
justified - asserting that it is justified is not enough. And the limitation must be acceptable 
in a free and democratic society. This means that the values of a society that respects 
freedom and democracy set the standard against which any limitation will be assessed. 
Relevant to this assessment will be the legitimacy of the purpose of the limitation and 
whether the limitation is proportionate to its purpose. Generally speaking, the New Zealand 
courts recognise that Parliament should be given some flexibility in deciding how to balance 
human rights and limitations on those rights. But ultimately, section 5 of the New Zealand 
Bill of Rights Act means that the courts cannot avoid making a judgement call on whether a 
limitation on human rights is reasonable when a case requires them to do so. 


In many countries bills of rights are part of the supreme law of the country, which means 
that all other law must respect the bill of rights or be set aside. That is not the position in 
New Zealand. Under New Zealand’s constitutional arrangements, Parliament is supreme 
and is free to enact legislation that is inconsistent with the New Zealand Bill of Rights Act. 
The courts cannot strike such legislation down. But the courts can declare that a particular 
law, or part of a law, is inconsistent with the New Zealand Bill of Rights Act.*? A similar 
mechanism is available under the Human Rights Act in respect of discrimination.* When 
such a declaration is made by a court (or the Human Rights Review Tribunal) Parliament can 
decide whether and how it responds. 


How New Zealand human rights laws have affected its political and legal systems 


The New Zealand Bill of Rights Act is the key source of legal obligation in respect of human 
rights in New Zealand. 


At the political level, the fact that the New Zealand Bill of Rights Act has endured largely 
unamended for 30 years suggests that, even though it was the subject of opposition at 
the time it was proposed, it now enjoys a reasonably secure position within New Zealand’s 
political system. 





4 See Attorney-General v Taylor [2018] NZSC 104, [2019] 1 NZLR 213, where a provision in the Electoral Act 1993 (which disqualified 
prisoners from voting) was held to be inconsistent with right to vote under section 12(a) of the New Zealand Bill of Rights Act. 
This provision has since been repealed. 


43 See Howard v Attorney General (No 3) (2008) 8 HRNZ 378 (HRRT), where such a declaration was made. 
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Section 7 of the New Zealand Bill of Rights Act requires the Attorney-General to draw 

to the attention of Parliament any proposed legislation that appears to be inconsistent 

with the New Zealand Bill of Rights Act. The report must be tabled in Parliament and, 

in practice, such reports will often prompt debate at Select Committee and within the 
legislative chamber on whether it is appropriate for there to be an interference with rights. 
But probably more importantly, the reporting mechanism operates as a disincentive to 
governments from introducing a Bill into Parliament that would generate a negative report 
from the Attorney-General. When seeking Cabinet approval to introduce a Bill to Parliament, 
government ministers must confirm that Bills comply with the New Zealand Bill of Rights Act 
and the Human Rights Act. This obligation is set out in the Cabinet Manual.* Although there 
have been several instances where legislation has been passed that is inconsistent with the 
New Zealand Bill of Rights Act, it is rare for this to occur.* 
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Section 6 of the New Zealand Bill of Rights Act requires courts to interpret laws consistently 
with guaranteed rights where this is possible. And the courts are fully empowered to deal 
directly with breaches committed by Public sector agencies in the exercise of their official 
functions, such as how New Zealand Police deal with people suspected of offending. 


Before the enactment of the New Zealand Bill of Rights Act, very few human rights cases were 
litigated before New Zealand courts. The enactment of the New Zealand Bill of Rights Act has 
significantly changed this. 


Criminal justice rights are the subject of litigation every day in New Zealand. This enables 
the courts to confirm the importance of law enforcement agencies respecting human rights. 
Some of the courts’ decisions have been controversial, but the important point is that the 
New Zealand Bill of Rights Act has enabled the issues to be litigated. The right to freedom of 
expression has been the subject of a large amount of litigation. As a result, the boundaries 
of important doctrines such as the law of defamation, hate speech and suppression of 
information about court cases have been the subject of critical review. 


Litigation has also had substantial effects on how the right to freedom from discrimination 
is protected under New Zealand law. In litigation under the Human Rights Act, several laws 
have been held to be inconsistent with the right to freedom from discrimination. This has 
resulted in amendments to some of those laws. Litigation also gives vulnerable community 
members, who have often been ignored or marginalised, an effective voice. For example, 
litigation about the right to freedom from discrimination has resulted in the recognition of 
the adoptive rights of unmarried partners.‘ 





44 Department of the Prime Minister and Cabinet, footnote 14 above at paragraph 7.65. 


45 An example of legislation being enacted despite a negative section 7 report is provided by the provision disqualifying prisoners 
from voting which was in issue in Attorney-General v Taylor, footnote 42 above. 


48 Re AMM and KJO [2010] NZFLR 629 (HC). 
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Other ways that New Zealand upholds human rights principles 


Giving effect to international human rights instruments through domestic laws is not the only 
way that New Zealand upholds human rights principles. Public institutions, participation in 
international assessments of compliance and public discourse also contribute. 


There are several public institutions that contribute to New Zealand’s observance of 
human rights, including the Human Rights Commission, the Office of the Ombudsman, the 
Privacy Commissioner, the Children’s Commissioner and the Independent Police Conduct 
Authority. The Human Rights Commission’s primary functions, which are set out in the 
Human Rights Act, are to: 


a) advocate and promote respect for, and an understanding and appreciation of, human 
rights in New Zealand society; 


b) encourage the maintenance and development of harmonious relations between 
individuals and among the diverse groups in New Zealand society; 


c) promote racial equality and cultural diversity; 
d) promote equal employment opportunities (including pay equity); and 


e) promote and protect the full and equal enjoyment of human rights by persons with 
disabilities.*” 


The Human Rights Commission exercises its functions through a mix of measures such 

as public advocacy, training and education campaigns, public statements on important 
human rights issues, submissions to Parliament and litigation. Before 2002, the 

Human Rights Commission could make decisions on complaints about alleged discrimination. 
Since 2002, the Human Rights Commission receives complaints and assists the parties to 
resolve them, but no longer makes decisions. If the parties cannot reach agreement, the 
complaint is referred to the Human Rights Review Tribunal for decision. 


Public discourse on human rights issues also contributes to New Zealand’s human rights 
system. Even where litigation has been unsuccessful, it has encouraged public discussion of 
important issues such as euthanasia. 





47 Human Rights Act 1993, section 5(1). 
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3.6 How human rights are relevant to our inquiry 
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Human rights are relevant to our inquiry into the terrorist attack on 15 March 2019 in 
several ways: 


a) Theuse of violence breaches the right to life and security of the person. 


b) The use of violence to pursue political ends undermines the right to fair political 
participation, by privileging the use of violence over the power of persuasion. 


c) Theuse of violence to pursue discriminatory ends discourages communities targeted by 
terrorism from being themselves by, for example, discouraging them from engaging in 
their religious practices. It can make members of the target community fearful by, for 
example, making them feel that they could be attacked at any time simply because of 
their colour, ethnicity, religious affiliation or sexual orientation. 


But terrorism also relates to human rights in another way. This is because state action 

to reduce the threat of terrorism, or to respond to a terrorist attack, can have an impact 
on human rights. In response to a terrorist attack, a state could introduce measures that 
threaten human rights, such as excessively harsh laws of arrest, detention without trial, 
surveillance and suppression of speech. If this were to occur, then terrorists would have 
succeeded in causing a democratic society to change how it balances public safety and 
human rights. Conversely, if done well, a state’s response to an act of terrorism could 
reaffirm its commitment to core human rights principles and, at the same time, recognise 
the need for the wider public and communities within it to feel that they are not being asked 
to bear unreasonable risk, nor being blamed for the acts of a few people who would do the 
community harm. 


The connection between human rights and terrorism has been recognised by the 

United Nations. The Vienna Declaration and Programme of Action states that “[t]he act, 
methods and practices of terrorism in all its forms ... are activities aimed at the destruction 
of human rights, fundamental freedom and democracy”.*® It provides that “the international 
community should take necessary steps to enhance cooperation to prevent and combat 
terrorism”. 





48 United Nations, footnote 32 above at Part |, paragraph 17. 
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At the same time, the need for states to not overreact, and to proceed with caution 

and balance, has been consistently reaffirmed at the United Nations. Its 2006 

Global Counter-Terrorism Strategy states that “international cooperation and any measures 
that we undertake to prevent and combat terrorism must comply with our obligations under 
international law, including ... in particular human rights law, refugee law and international 
humanitarian law”.*? Recognising the risk that terrorism can lead to the demonisation of 
certain sectors of the community, the Global Counter-Terrorism Strategy also states that 
“terrorism cannot and should not be associated with any religion, nationality, civilisation or 
ethnic group”. 


We have considered human rights principles throughout our inquiry. They affect: 


a) the balance between freedom of expression and the expression of views that are hateful 
toward members of New Zealand’s ethnic and religious communities; 


b) the extent of the surveillance that Public sector agencies should conduct to gather 
intelligence that can inform them of the people and networks who pose terrorism threats 
and risks to New Zealand; 


c) the impact that “othering” can have on New Zealand’s ethnic and religious communities 
and the importance therefore of measures to counteract any temptation to see members 
of those communities as not being “real New Zealanders”; and 


d) the core values that New Zealand’s Public sector agencies are meant to promote and 
protect. 


3.7. Concluding comments 


Human rights are enjoyed by everyone in New Zealand. New Zealand’s human rights system 
upholds those rights not only through laws and in the courts, but also in the practice of 
public institutions, the periodic reporting process before the United Nations human rights 
bodies and public discourse. New Zealand has agreed to be bound by several international 
human rights instruments, although not all of these have been incorporated into domestic 
law. These obligations contribute to the human rights principles that are understood, 
supported and reflected by New Zealand society. 


The architecture of the international and domestic human rights systems and the direct and 
indirect limits that those systems impose on the freedom of legislators to make laws and 
judges to interpret laws is a theme we return to from time to time. But it must always be 
recalled that human rights are more than laws. They are just as much about individual and 
societal attitudes and behaviours. All New Zealanders have important contributions to make. 





49 United Nations Global Counter-Terrorism Strategy (2006) A/RES/60/288. 
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Chapter 4: Overview of the national security system, 
intelligence function and the counter-terrorism effort 





4.1 Introduction 
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As we will explain, Public sector agencies were not aware of the individual’s intent to carry 
out the 15 March 2019 attack. One of the major issues we must address in our report is why 
this was so. To do this we must review how Public sector agencies detect potential terrorists 
and the activities and preparation of the individual. As part of this exercise, we examine 
New Zealand’s counter-terrorism effort (see Part 8: Assessing the counter-terrorism effort). 
This provides context for our consideration of whether the individual's activities 

and preparation could or should have been detected by Public sector agencies 

(see Part 6: What Public sector agencies knew about the terrorist). 


This chapter provides a description of New Zealand’s broader national security system and 
overviews of the intelligence function and the counter-terrorism effort, both of which are 
part of the national security system. 


4.2 National security system 


An all hazards, all risks approach 


One of the most important duties of government is protecting the security of the nation. In 
our report we discuss national security, which is defined in New Zealand’s National Security 
System Handbook as “the condition which permits the citizens of a state to go about their 
daily business confidently free from fear and able to make the most of opportunities to 
advance their way of life”.s° 


The broad definition of national security reflects an “all hazards, all risks” approach to 
national security. This has been the policy approach of the New Zealand government since 
2001. All significant risks to national security - whether from inside or outside New Zealand, 
from human or non-human sources - are addressed by the national security system. These 
include threats such as espionage, transnational organised crime, terrorism, cyber-security 
attacks, natural disasters and pandemics. 


Threat versus risk 


In our report we use the terms “threat” and “risk.” They are not the same thing. A threat is 

a source of potential damage or danger. Risk is determined by assessing the likelihood of 

a threat occurring and the seriousness of the consequences if it does. The more likely the 
threat occurrence, and the more severe the likely consequences, the greater the risk. In the 
case of terrorism in New Zealand, the threat of terrorism was assessed as being low before 

15 March 2019, but the consequences of a terrorist attack were considered sufficiently serious 
that the risk was assessed as high. 





50 


Department of the Prime Minister and Cabinet National Security System Handbook (August 2016) at page 7. 
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The 4Rs approach 

New Zealand’s approach to national security is based on four areas of activity referred to as 
“the 4Rs”: 

a) Reduction - identifying and mitigating risks. 

b) Readiness - developing national security capabilities before they are needed. 

c) Response - taking action in the face of an imminent/close threat or in response to one. 


d) Recovery - coordinating efforts to recover from an event. 


So the system has two orientations - a proactive mode (Reduction and Readiness for an 
event that has not occurred) and a reactive mode (Response and Recovery from an event that 
has occurred). 


We are interested mainly in the proactive mode of the national security system - Reduction 
and Readiness - and in relation to the threat and risk of terrorism. The proactive mode 
focuses on risk management and building national resilience. This includes building 
resilience of New Zealand’s infrastructure, institutions and communities. Due to views 
expressed by Muslim communities, we have also looked at certain aspects of the Recovery 
phase. Our Terms of Reference specifically excluded us from looking into the Response to 
the terrorist attack. 


Roles within the national security system 


The scope of the all hazards, all risks and 4Rs approach means that many Public sector 
agencies have roles in the national security system. For each type of national security risk, 
there is intended to be a lead agency. Other agencies make contributions based on their 
agreed roles and responsibilities. 


Local government, the private sector and local communities also have increasingly 
important roles within the national security system. As we describe in Part 8, chapter 3, 
however, the efforts of Public sector agencies to engage the wider public in national 
security have been limited. 


Some 30 Public sector agencies have roles in national security. This creates a need for 
governance of the system as a whole, including central coordination. 


The national security system operates at three levels: 
a) The prime minister and ministers. 
b) Chief executives. 


c) Officials (within Public sector agencies with national security responsibilities). 
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Figure 3: Governance of the National Security System 
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13. New Zealand’s national security is a core responsibility of the prime minister and executive 
government. The prime minister is the Minister for National Security and Intelligence, 
and the Cabinet is at the top of the national security system. It considers decisions and 
recommendations from the Cabinet External Relations and Security Committee. Membership 
of this committee includes the prime minister and ministers responsible for key agencies 
involved in national security." Cabinet approves the National Security and Intelligence 
Priorities, which we discuss later in this chapter. 





5’ See Department of the Prime Minister and Cabinet website (ERS) Cabinet External Relations and Security Committee https:// 
dpmc.govt.nz/publications/co-19-4-cabinet-committees-terms-reference-and-membership. 
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Chief executives 


Like ministers, chief executives of Public sector agencies have collective and individual 
responsibilities. They are responsible to the appropriate minister for their department’s 
“responsiveness on matters relating to the collective interests of government”.” They also 
have more specific responsibilities, such as providing free and frank advice to ministers. 
Sometimes chief executives have responsibilities established by legislation specific to their 
agency. For example, the police commissioner must act independently of ministers regarding 
the maintenance of order, the enforcement of the law and the investigation and prosecution 
of offences.*? 


Two governance boards bring together the chief executives of agencies with national security 
responsibilities: 


a) The Security and Intelligence Board focuses on external and internal security threats 
and intelligence issues. 


b) The Hazard Risk Board deals with emergency management and civil defence matters 
and hazard risks. 


Both boards are chaired by the Department of the Prime Minister and Cabinet. Between 
them they cover all hazards, all risks. 


It is the Security and Intelligence Board that is relevant for our purposes. It includes the 
chief executives (or their delegates) of the Department of the Prime Minister and Cabinet, 
the Government Communications Security Bureau, the Ministry of Business, Innovation and 
Employment, the Ministry of Defence, the Ministry of Foreign Affairs and Trade, New Zealand 
Customs Service, New Zealand Defence Force, New Zealand Police and the New Zealand 
Security Intelligence Service. Other chief executives may be invited to attend meetings if 
required. 


The Security and Intelligence Board reports to the Cabinet External Relations and Security 
Committee. The Board’s purpose, as defined in its terms of reference, is to: 


a) lead, build and govern the security intelligence system; 
b) hold the system to account for delivery; 

c) build system capabilities and capacity; and 

d) remain alert to current threats and opportunities. 


The Security and Intelligence Board meets monthly. Counter-terrorism is a regular feature of 
its discussions. 





5? Public Service Act 2020, section 52(1)(b). 


53 Policing Act 2008, section 16(2). 
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Several subcommittees of the Security and Intelligence Board bring together officials from 
different agencies to focus on particular national security issues. The subcommittees most 
relevant to our inquiry are the Counter-Terrorism Coordination Committee and the National 
Intelligence Coordination Committee (see Part 8, chapter 3). 


The role of the Department of the Prime Minister and Cabinet 


The Department of the Prime Minister and Cabinet is the lead Public sector agency on 
national security. It is responsible for coordinating the activity of the agencies involved in the 
national security system. It does this through its National Security Group. This group also 
advises the prime minister and other ministers on national security matters. 


As will become apparent, the Department of the Prime Minister and Cabinet’s coordination 
role leaves a large measure of autonomy for the chief executives of the Public sector 
agencies involved in the national security system. This is particularly true of the 
Government Communications Security Bureau, New Zealand Police and the New Zealand 
Security Intelligence Service. We discuss the leadership and coordination role of the 
Department of the Prime Minister and Cabinet in some detail in Part 8, chapter 3. 


The challenges facing the national security system 


New Zealand’s national security system requires contributions from many different agencies. 
This presents some challenges. 


First, these agencies are often responsible for many different work programmes (including 
programmes unrelated to national security). The agencies in the national security system 
therefore require mechanisms to prioritise their resources and their work programmes. 
Other countries - the United Kingdom for example - have national security strategies to help 
with this. As we discuss in Part 8, chapter 3, New Zealand did not have national security or 
counter-terrorism strategies in place before 15 March 2019 despite numerous attempts since 
at least 2012 to produce them. 
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Second, the national security system is affected by similar structural issues that impede 
interagency collaboration in other systems or networks of agencies in the Public sector. As 
Te Kawa Mataaho Public Service Commission recently said, “our public management system 
is fragmented and struggles to act cohesively to address cross-cutting problems”. This 

is because within the current framework, the individual responsibility of chief executives 

to individual ministers incentivises officials to focus on their own agency’s outputs and 
outcomes. There is less incentive for them to focus effort across agencies and, ultimately, 
the individual gains of each agency will almost always take priority over interagency efforts. 
There are more incentives for Public sector agencies to work vertically than horizontally. 
This hinders effective collaboration to address complex issues that cut across agency 
boundaries. The role of the central agencies (the Department of the Prime Minister and 
Cabinet, Te Kawa Mataaho Public Service Commission and the Treasury) is to provide 
leadership on cross-cutting issues. The Public Service Act 2020 provides new models 
aimed at making interagency collaboration easier to achieve. 


Third, there are uncertainties and difficulties with the concept of resilience in New Zealand’s 
approach to national security. Resilience is arguably easier to achieve for infrastructure and 
institutions - for example, through physical changes to a building or measures to protect 
New Zealand’s information systems against cyber threats. Resilience for people is not so 
straightforward. A one-size-fits-all approach to resilience is unlikely to be effective when 

it comes to building community resilience. What is instead required is an appropriate 
separation between the concept of physical resilience and psychological resilience. This 
separation should guide the necessarily different approaches to building resilience of things 
and in people.* 


There is evidence to suggest that community participation in national security plays an 
important role in community resilience. For this to happen, there must be deep engagement 
of the national security system with communities, civil society, local government and the 
private sector.” 





54 Te Kawa Mataaho Public Service Commission Impact Statement: State Sector Reform (2019) at page 3 https://www.publicservice. 
govt.nz/assets/Legacy/resources/Impact-Statement-State-Sector-Act-Reform.pdf. This issue has been highlighted in successive 
reviews over the past 30 years including: New Zealand Government Review of State Sector Reforms (1991); Te Kawa Mataaho 
Public Service Commission Ministerial Advisory Group on the Review of the Centre (2001); Te Kawa Mataaho Public Service 
Commission Better Public Services Advisory Group Report (2011). 


55 This “commitment problem” is solved in the private sector through the use of contracts. However, Public sector agencies 


cannot enter into enforceable contracts with one another because they are not distinct legal entities. They are, rather, separate 
administrative units of the same legal entity, the Crown. 
58 Christopher Rothery New Zealand’s National Security Framework: A recommendation for the development of a National Security 
Strategy (a thesis submitted in partial fulfilment of the requirements for the degree of Master of Arts in International Relations 
and Security Studies at The University of Waikato, 2078). 


57 Christopher Rothery, footnote 56 above. 
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4-3 The intelligence function 
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Intelligence is a key contributor to almost all activities in New Zealand’s counter-terrorism 
effort, which we discuss later in this chapter. It can indicate the emergence of a harmful 
ideology or inform decisions to designate a terrorist organisation or disrupt an imminent 
terrorist attack. 


What is intelligence? 


Intelligence is usually regarded as information that has been collected, processed and used 
to inform decision-making.** Ideally, it consists of the “right information, understood in 
context, delivered to the right customers, at the right time”. Sometimes intelligence comes 
from information that is publicly available, or is “open-source” - for example, the internet, 
newspapers, journals and other non-secret sources. Such intelligence is increasingly 
exploited by intelligence agencies around the world. 


In contrast, secret intelligence is based on information obtained covertly, often using 
classified techniques and tools. Secret intelligence can be collected covertly from the 
internet or through more traditional means, such as human sources. Sometimes it is a 
combination of the two. 


What guides intelligence activities? 


Intelligence resources are scarce. As our report will illustrate, Public sector agencies 

must make tough choices about where to focus their resources. At a high level, the 

National Security and Intelligence Priorities set the focus area for all intelligence activity 
across the national security system. In the case of the Government Communications Security 
Bureau and the New Zealand Security Intelligence Service, the Priorities authorise and limit 
their intelligence activity. That is, their intelligence collection and analysis must contribute 
to the National Security and Intelligence Priorities.*° 


The National Security and Intelligence Priorities were updated approximately every three 
years before 15 March 2019. The current National Security and Intelligence Priorities were 
adopted in December 2018 and an unclassified version was published in an appendix to the 
Department of the Prime Minister and Cabinet’s 2019 Annual Report. In September 2020, 

the National Security and Intelligence Priorities were published on the Department of the 
Prime Minister and Cabinet’s website.®° Terrorism is one of the 16 National Security and 
Intelligence Priorities. The wording of the Priority is broad, and therefore covers a wide range 
of intelligence activity, directed at a number of threats and risks. Choices about which 





58 “Raw” intelligence is unprocessed information that has been collected by an intelligence and security agency but which, by force 
of time constraints or other circumstance, may sometimes have to be taken into account in decision-making. 


58 Section 10(1) of the Intelligence and Security Act 2017 requires their collection and analysis of intelligence to be consistent with 
the priorities identified by the government, which, in practice, means the National Security and Intelligence Priorities. 


6° Department of the Prime Minister and Cabinet website National Security and Intelligence Priorities https://dpmc.govt.nz/our- 
programmes/national-security-and-intelligence/national-security-and-intelligence-priorities. 
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threats to allocate resources to rests with each agency. We discuss in more detail in 
Part 8, chapter 3 how the National Security and Intelligence Priorities operate in practice 
and particularly in respect of terrorism. 


The New Zealand Intelligence Community 


The Government Communications Security Bureau, the National Security Group of the 
Department of the Prime Minister and Cabinet (including the National Assessments 
Bureau) and the New Zealand Security Intelligence Service (including the Combined Threat 
Assessment Group) make up the New Zealand Intelligence Community. 


The New Zealand Security Intelligence Service focuses on a range of threats, including 
terrorism. It has a significant role in the counter-terrorism effort. Its collection methods are 
largely based on human intelligence activities. Human intelligence is information collected 
from people. It may come from a range of sources - from confidential human sources to 
tip-offs from members of the public. Other collection methods are also used, including 
physical surveillance, tracking devices, technical interception and listening devices - most 
of which require a warrant under the Intelligence and Security Act 2017. 


The Government Communications Security Bureau is New Zealand’s signals intelligence 
agency. It mainly gathers intelligence through the collection and analysis of electronic 
communications such as telephone calls, text messages and online communication. The 
capabilities used by the Government Communications Security Bureau are specialised 
and highly technical. Most of the work it carries out also requires a warrant under the 
Intelligence and Security Act. 


Some parts of the New Zealand Intelligence Community assess rather than collect 
intelligence. In New Zealand, intelligence assessments are mainly provided by two entities 

- the National Assessments Bureau and the Combined Threat Assessment Group. These 
agencies fuse multiple pieces of intelligence from various sources (for example, intelligence 
from other Public sector agencies and international partners) and produce assessments 

to inform decision-making. They do not provide policy advice or recommend actions as a 
result of their assessments.” This is done by the policy or operational agency, relevant to the 
particular issue. 


The National Assessments Bureau prepares intelligence assessments on matters of national 
security, international relations and economic wellbeing.” Its assessments are either 
commissioned by customers (other Public sector agencies such as the Ministry of Foreign 
Affairs and Trade) or self-initiated. 





5 This helps to ensure that assessments are impartial and that assessments are not tailored to support a particular decision. 


ee Intelligence and Security Act 2017, section 243. 
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The Combined Threat Assessment Group sits within the New Zealand Security Intelligence 
Service and may include secondees from other agencies, including the Department of 
Corrections, the Government Communications Security Bureau, the New Zealand Defence 
Force and New Zealand Police. It provides independent assessments to inform the national 
security system of the threat posed by terrorism to New Zealand and New Zealand’s interests 
(including those offshore). Its assessments usually have an immediate-to-12 month focus 
(except in relation to planning for a major event in New Zealand, such as a Rugby World Cup). 
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One of the Combined Threat Assessment Group’s roles is to set and regularly review 

New Zealand’s terrorism threat level. This is fixed on a six-level scale from “negligible” to 
“extreme” and is under continual evaluation. Threat assessments differ from the national 
counter-terrorism risk profile, which also considers the consequences of threat occurrence 
and determines the assessed risk. 


Figure 4: Scale of terrorism threat level 


Likelihood assessment Threat Level 


Terrorist attack, or violent criminal behaviour, or violent protest activity 
is expected 





Terrorist attack, or violent criminal behaviour, or violent protest activity 
is assessed as highly likely 





Terrorist attack, or violent criminal behaviour, or violent protest activity 
is assessed as feasible and could well occur 





Terrorist attack, or violent criminal behaviour, or violent protest activity 
is assessed as a realistic possibility 


Terrorist attack, or violent criminal behaviour, or violent protest activity 
: . VERY LOW 
is assessed as unlikely 


Other Public sector agencies that collect and assess intelligence 








A number of other Public sector agencies collect and assess intelligence. In 
Part 8: Assessing the counter-terrorism effort we also discuss the intelligence 
functions of Immigration New Zealand, New Zealand Customs Service and 
New Zealand Police. 
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Partner agencies 


The Government Communications Security Bureau and the New Zealand Security Intelligence 
Service actively cooperate with international partner agencies in collecting and sharing 
intelligence information, most particularly with partners in the other Five Eyes countries - 
Australia, Canada, the United Kingdom and the United States of America. New Zealand 
Public sector agencies also work with non-Five Eyes countries and groupings. 


The Government Communications Security Bureau and the New Zealand Security Intelligence 
Service depend heavily on their international partner agencies. This was well explained in 
the 2016 Cullen-Reddy Report and remains valid: 


As national security threats are becoming more complex and transnational, it would be 
extremely expensive for New Zealand to create a wholly self-reliant intelligence community. 
This is particularly so given our small size when compared to some of our partners. 

Through foreign intelligence partnerships, New Zealand draws on a much greater pool of 
information, skills and technology than would otherwise be available to it. For example, a 
foreign partner may have greater access to intelligence that requires the right mix of ethnic, 
cultural and language backgrounds to collect and analyse. Intelligence partnerships also 
help New Zealand prioritise and focus intelligence collection and assessment resources on 
the areas most important to us, while avoiding intelligence gaps. 


We obtained some statistics from the Agencies that give a sense of how significant our 
international partnerships are. Of all security leads the New Zealand Security Intelligence 
Service investigates, around half are received from foreign partners. These represent 
possible threats to the security of New Zealand, most of which we would not be able to 
discover on our own (for instance, because they have a foreign source). New Zealand also 
gains considerably more from its international partnerships than we provide in return. For 
every intelligence report the New Zealand Security Intelligence Service provides to a foreign 
partner, it receives 170 international reports. Similarly, for every report the Government 
Communications Security Bureau makes available to its partners, it receives access to 99 
in return. 


International partner agencies also assist in other ways, with training, secondment of staff 
and cooperation on operational best practice. 


Monitoring and oversight of the intelligence community 


Given the intrusive powers that can be used by intelligence and security agencies (such 

as surveillance), oversight is necessary to help ensure that the agencies’ powers are used 
lawfully and appropriately, with minimal impact on members of the public. We discuss this 
oversight in detail in Part 8, chapter 3. 





3 Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM Intelligence and Security in a Free Society: Report of the First 
Independent Review of Intelligence and Security in New Zealand (Cullen-Reddy Report) (2016) at page 45. 
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4.4 New Zealand’s counter-terrorism effort 
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Terminology 


We use the term “the counter-terrorism effort” to refer to all activities undertaken by 

Public sector agencies (including the counter-terrorism agencies, the New Zealand Intelligence 
Community and the border agencies) to prevent, mitigate, respond to and disrupt actual or 
potential terrorist threats. This may involve disrupting the travel of potential or actual terrorists, 
or their financing or other logistical support. 


Over the past decade, the ways that countries have undertaken counter-terrorism has evolved. 
This evolution is based on the understanding that the traditional approach can and should be 
complemented with activities that target the social, political and economic drivers of violent 
extremism and terrorism. This has resulted in a much wider range of actors, including local 
authorities, social policy agencies, non-governmental organisations and community groups 
becoming involved in counter-terrorism. This more comprehensive approach is often referred 
to as “countering violent extremism”. We have found the experiences in other jurisdictions are 
instructive for New Zealand’s efforts. 


There are different usages of the term countering violent extremism, but we use it to describe 
efforts to intervene before a person is radicalised to undertake a terrorist attack. Such efforts 
can cover a spectrum of activities. At one end are targeted interventions designed to support 
individuals showing signs of radicalisation. At the other end are activities that aim to prevent the 
emergence of violent extremism though building social cohesion. This includes a wide range of 
interventions focused on improving social outcomes, such as youth development, education and 
employment. While it is accepted that the efforts to build social cohesion support the aims of 
counter-terrorism, it is also generally accepted that these efforts should be pursued separately to 
counter-terrorism. Social cohesion has broader aims and is worthwhile in itself. We discuss this 
in more detail in Part 8: Assessing the counter-terrorism effort and Part 9: Social cohesion and 
embracing diversity. 
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The key Public sector agencies 


An effective counter-terrorism effort requires that multiple Public sector agencies work 
together as an integrated whole. 


The agencies of primary interest for our purpose are set out below: 


a) 


b) 


c) 


d) 


The Department of the Prime Minister and Cabinet coordinates the counter-terrorism 
effort and provides strategic guidance and policy advice. 


The Government Communications Security Bureau provides specialist intelligence 
support to New Zealand Police’s and the New Zealand Security Intelligence Service’s 
terrorism investigations. It also receives a large amount of signals intelligence from Five 
Eyes partners about foreign extremist individuals and organisations. This information is 
provided to relevant Public sector agencies when appropriate. 


New Zealand Police are the lead agency for Response to a terrorism event that 
is underway or an imminent or close threat. They also collect intelligence on and 
investigate potential terrorist threats and have roles in the prevention of violent 
extremism. 


The New Zealand Security Intelligence Service collects intelligence on and 
investigates possible and actual terrorist threats. It does not have enforcement functions 
- meaning, for example, it cannot arrest and prosecute a person. That is a role for 

New Zealand Police. The New Zealand Security Intelligence Service uses the intelligence 
it collects to inform (when appropriate) the New Zealand government and other Public 
sector agencies such as New Zealand Police, as well as international partner agencies, to 
enable mitigation of terrorism risks. 


The agencies with the primary roles in the counter-terrorism effort are New Zealand 
Police and the New Zealand Security Intelligence Service. We refer to them as the 
“counter-terrorism agencies”. 


Also of some relevance are mechanisms that are in place for the identification of 
potential terrorists before they board aircraft bound for New Zealand and at the border. 
These primarily involve Immigration New Zealand, New Zealand Customs Service and 
the New Zealand Security Intelligence Service. We discuss this later in our report in 
Part 8: Assessing the counter-terrorism effort. 
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Where do terrorism leads come from? 


Detection of potential terrorists usually starts with a lead suggesting that a particular person 
or perhaps a group of people pose a threat of terrorism. This may be based on information 
supplied by a Public sector agency or international partner agency. It may also result 

from a tip-off from a member of the public or the private sector. The more security aware 
New Zealand communities are, the greater the likelihood of tip-offs. 


In some countries, there are public-facing counter-terrorism strategies that inform the 
public of threats and risks, explain the government’s efforts to manage them and promote an 
appropriate role for the public. An example is a “see something, say something” message, 
with advice on what sorts of things might warrant a member of the public’s attention and 
action. Before 15 March 2019, there was no such strategy in New Zealand. 


New Zealand Police and the New Zealand Security Intelligence Service are not merely passive 
recipients of leads. For instance, an existing investigation into a subject of interest may 
result in the identification of another person who warrants investigation. Other efforts to 
generate leads include monitoring (by various mechanisms) of certain places (including on 
the internet) and the activities and communications of certain groups of people. 


Analysing data sets for indicators of terrorism (such as travel patterns, financial transactions 
and social media activity) may provide opportunities to detect suspicious activity. Lead 
generation of this kind is based on identifying behaviours that can serve as indicators of 
terrorist intent or preparation. We discuss this in more detail in Part 8: Assessing the 
counter-terrorism effort. 
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Chapter 5: Harmful behaviours, right-wing 
extremism and radicalisation 


5.1 Introduction 


It is not possible to understand the pattern of events that both led to, and demonstrated, the 
individual’s radicalisation without a general understanding of extreme right-wing thinking and 
some of its markers. 


A description of the key dynamics of right-wing extremism is also required to understand the 
harms that communities have told us they have experienced. 


The discussion that follows outlines what we mean by extremism and why it is important 

to look at a spectrum of behaviours and their consequences for society. We then address 
aspects of extreme right-wing thinking and behaviour that are relevant to the account 

we are about to tell about the individual, the behaviours evident in his radicalisation and 
mobilisation to violence and his resort to terrorism (see Part 4: The terrorist). Not wishing to 
amplify extreme right-wing ideologies, we do not provide a complete survey. We also discuss 
what we mean by radicalisation to violence and outline some of the drivers of radicalisation, 
and the challenges for Public sector agencies in identifying and mitigating the threat from 
right-wing extremism. 


5.2 Extremism 


Extremism is generally understood as a belief system underpinned by rigid and 
uncompromising beliefs outside the norm of a society. In the case of New Zealand this 
might be by rejecting democracy, the rule of law and human rights.®* Extremism can have 
different ideological underpinnings and manifest in a number of ways. Central to extremist 
belief systems is a desire to bring about change and overhaul the political, social or religious 
environment to conform to the person’s or group’s idealised vision of society. 


Extremist belief systems are characterised by a strong “us versus them” mentality, and 

belief in the supremacy of, or at least strong loyalty to, the group a person is part of.® This 
can be any political, religious, social, ethnic or other grouping. Anyone outside of that group 
(for example, people from a different religion or ethnicity) can present a threat to the group’s 
existence. The group’s survival is therefore contingent on hostility towards and suppression 
of those who are outside the group. 





64 Jayde Walker “An introduction to countering violent extremism” (2017) 5(2) Practice: The New Zealand Corrections Journal; 
Logan Macmair and Richard Frank “Voices against extremism: a case study of a community-based CVE counter-narrative 
campaign” (2017) 10 Journal for Deradicalisation; Astrid Botticher “Towards academic consensus definitions of radicalisation 
& extremism,” (2017) 11(4) Perspectives on Terrorism; Tore Bjargo and Jacob Aasland Ravndal Extreme-Right Violence and 
Terrorism: Concepts, patterns, and responses (International Centre for Counter-Terrorism Policy Brief, 2019). 


65 JM Berger Extremism (MIT Press, London, 2018). 


6° Astrid Botticher, footnote 64 above; Commission for Countering Extremism Challenging Hateful Extremism (Department of 
Security and Crime Science, United Kingdom, 2019). 
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A spectrum of behaviours 
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In this report we will talk about a range of behaviours that cause harm to people, some 

of which are inspired by extremist ideologies and others which are not. These do not 
represent all the types of behaviours that cause harm but are those that are most material 
to our inquiry. 


Having extreme beliefs does not automatically lead to violence and the majority of those 
who subscribe to an extremist ideology do not commit acts of violence. Violent extremism 
only occurs where an individual or group believes that violence is a legitimate (and often the 
only) way through which they can achieve systemic change. Violent extremism encompasses 
any violent actions committed to further extremist aims, including vandalism, spontaneous 
violence and terrorism.” 


International evidence has shown there are also behaviours underpinned by an extremist 
ideology that are not violent but nonetheless can cause harm to individuals and create 

fear and division within societies.®* This occurs when they are done with the intention of 
inciting or amplifying hate against a group. The United Kingdom Commission for Countering 
Extremism uses the term “hateful extremism” to describe “behaviours that are actively 
hateful or incite hate towards an identified out-group for the survival of an in-group”.® This 
includes conduct that spurs hatred, such as protests or campaigns led by extremist groups 
that involve denigrating, insulting, belittling or vilifying perceived others. Some activities 
conducted by individuals and groups in what we term the radical right below would fit within 
this category. 


There are also a wide range of behaviours that are targeted at people based on their ethnicity 
or religion.”° These behaviours are not what would be termed extremist (as they are not 
motivated by a desire for change) but are underpinned by hostile attitudes to people of 
certain religions and ethnicities. This can include physical and verbal harassment. 





87 John Horgan “From profiles to pathways and roots to routes: Perspectives from psychology on radicalization into terrorism” 
(2008) 618(1) The Annals of the American Academy of Political and Social Science; Tore Bjargo and Jacob Aasland Ravndal, 
footnote 64 above; United Nations Office of Drugs and Crime (n.d.) “Radicalisation” and “Violent Extremism” 
https://www.unodc.org/e4j/en/terrorism/module-2/key-issues/radicalization-violent-extremism.html. 


68 Commission for Countering Extremism, footnote 66 above. 
°9 Commission for Countering Extremism, footnote 66 above at page 10. 


7° Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above. 
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Distressing 
Content 


Other behaviours that can cause harm are racist remarks or micro-aggressions. Racist 
remarks and micro-aggressions are similar and have been defined as “brief and 
commonplace daily verbal, behavioural or environmental indignities, whether intentional 
or unintentional, that communicate hostile, derogatory or negative slights and insults”.” 
This includes, for example, making statements that reinforce negative stereotypes about 
ethnic or religious communities or making statements that cause people who are not from 
the majority group to feel that they do not belong. 


Figure 5: A spectrum of harmful behaviours 


Racism and Religiously and/or Hateful extremism Violent extremism 


micro-aggressions ethnically motivated 
harassment and 
abuse 


- Biased or belittling 
jokes 


+ Stereotyping - Muslim 
students being 
asked to explain 
and account for the 
behaviour of Islamist 
extremists 


- Micro-aggressions 
- someone not from 
the majority group 
being told they speak 
English well, which 
sends a message that 
they are a foreigner 





While extremist views may be seen by wider society as morally abhorrent or problematic, 
holding such views and acting on them in certain ways (for example through public 
engagement and protest) is often not illegal.” Describing behaviours that do not involve 
violence or the threat of violence as extremist and seeking to discourage or impose legal or 
social sanctions on them have presented challenges (for instance, complaints that rights to 
freedom of speech and democratic debate are being limited) and, in this way, exacerbated 
polarisation.” 





” Derald Sue, Christina M Capodilupo, Gina C Torina and Jennifer M Bucceri “Racial microaggressions in everyday life: 
Implications for clinical practice” (2007) 62(4) American Psychologist. 


” Noémie Bouhana The Moral Ecology of Extremism: A Systemic Perspective (Commission for Countering Extremism, 
Department of Security and Crime Science, United Kingdom, 2019). 


73 Commission for Countering Extremism, footnote 66 above. 
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We are also interested in behaviours further along the spectrum and which sit outside the 
counter-terrorism effort. This is because there are often “fluid boundaries” between hate 
crime and terrorism especially in the case of right-wing extremism.” Internationally we have 
seen that violence sits at the peak beneath which are many other behaviours that cause harm 
and create an environment that is conducive to violence.” 


Many individuals and groups who engage in behaviours that could be considered hateful 
extremism support dehumanising and divisive rhetoric against perceived others but are 
careful to avoid direct engagement with, or endorsement of, violence.”° Rhetoric of this 
kind can shift the boundaries of what is considered acceptable public debate towards a 
normalisation of, for example, IsLamophobic and anti-immigrant sentiment.” It is likely that 
these behaviours encourage and legitimise the use of violence.” We discuss this in regards 
to the far right below. 


Behaviours outside of violent extremism can cause harm at the individual level to the mental 
health and wellbeing of those who are targeted, and at the societal level through increased 
social division, intolerance and polarisation.”? This can have negative impacts on social 
cohesion. We discuss this in more detail in Part 9: Social cohesion and embracing diversity. 





7 United Nations Security Council Counter-Terrorism Committee Executive Directorate CTED Trends Alert: Member States 
concerned by the growing and increasingly transnational threat of extreme right-wing terrorism (April 2020) at page 2. 


75 Commission for Countering Extremism, footnote 66 above. 


76 Jacob Davey and Julia Ebner The Fringe Insurgency: Connectivity, Convergence and Mainstreaming of the Extreme Right (Institute 


for Strategic Dialogue, 2017); Jacob Davey and Julia Ebner ‘The Great Replacement’: The Violent Consequences of Mainstreamed 
Extremism (Institute for Strategic Dialogue, 2019). 


77 Jacob Davey and Julia Ebner (2017), footnote 76 above; Jacob Davey and Julia Ebner (2019), footnote 76 above; Australian 
Muslim Advocacy Network Interim Research Report: An Introduction to Extreme Right Actors and Ideologies Targeting the Islamic 
Community (August 2020). 


7 Richard McNeil-Willson, Vivian Gerrand, Francesca Scrinzi and Anna Triandafyllidou Polarisation, Violent Extremism and 


Resilience in Europe today: An analytical framework (BRaVE - Building Resilience against Violent Extremism and Polarisation, 
2019); Jonathan Githens-Mazer and Robert Lambert /slamophobia and Anti-Muslim Hate Crime: a London Case Study (European 
Muslim Research Centre, University of Exeter, United Kingdom, 2010); Coleen E Mills, Joshue Freilich and Steven M Chermak 
“Extreme Hatred: Revisiting the Hate Crime and Terrorism Relationship to Determine Whether They Are “Close Cousins’ or ‘Distant 


303 


Relatives’” (2017) 63 Crime & Delinquency. 


78 Commission for Countering Extremism, footnote 66 above. 
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5.3 The nationalist far right, the radical right and the extreme 
right-wing 


To the right of traditional right-wing conservative and libertarian opinions is a political space 
that has been called the far right. It is occupied by a range of ideologies, orientations and 
patterns of thinking. These include a strong form of nationalism that is not so much an 
ideology®° but rather an orientation that holds that western civilisation and its values are 
under threat from non-native (or alien) elements, whether people (particularly immigrants) 
or ideas (such as multiculturalism). It is this form of far right thinking that is primarily 
relevant for our inquiry. There are other far right patterns of thinking - including 
“deep-state” conspiracy theories (such as QAnon)* or anti-feminist ideologies (such as 
“incel” ideology). While sexist attitudes often form part of extreme right-wing thinking and 
anti-feminist ideologies can act as a gateway to other extreme right-wing ideologies, these 
patterns of thinking are of less relevance for our purposes. Right-wing extremism experts 
Tore Bjgrgo and Jacob Aasland Ravndal have provided a simple taxonomy of the nationalist 
far right, which for the purposes of this report, we adopt.™ 





8° Alexander Meleagrou-Hitchens and Hans Brun A Neo-Nationalist Network: the English Defence League and Europe’s 
Counter-Jihad Movement (The International Centre for the Study of Radicalisation and Political Violence, 2013) at page 30. 
81 QAnon relates to a conspiracy theory in which a “deep state” made up of political elites secretly controls the 
United States of America. 


5 “Incels” stands for “Involuntary Celibates”. Incels are an online community of males unable to form sexual or romantic 


engagements. Their behaviour is informed by a misogynist ideology that men are entitled to sexual access to women and 
that feminists are controlling society to the detriment of men. A number of incels have committed acts of terrorism. 


83 United Nations Security Council Counter-Terrorism Committee Executive Directorate, footnote 74 above. 


54 Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above at page 3. 
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Figure 6: Taxonomy of the nationalist far right 


OQ 
° 
3 
= 
@ 
x 
boy 


The Far Right 
People and state are one. Foreigners threaten this community. 


Radical right Extreme right 


Democracy should be maintained. Democracy should be replaced. 


The liberal elites must be replaced. Violence against enemies of the 
people is legitimate. 














Ethnic nationalism Racial nationalism 


People of different ethnic origin 
should not be mixed. Cultural 
diversity should be maintained. 


Cultural nationalism 


Muslim culture is backward and 
repressive. 


The white race is superior. Racial 
mixing threatens its survival. 
Western culture must be protected 
against Muslim immigration and 
Islamisation. 


Revolutionary change is needed to 
White Europeans and Americans overthrow Jewish dominance. 
have a right to defend their nations 


from foreign peoples and cultures. 


People of different ethnic origin 
should return to their homelands. 


Inferior races and racial enemies 
must be subjugated, deported or 
exterminated. 


Muslims must assimilate to 
Western culture or return to their 
homelands. 


What Tore Bjgrgo and Jacob Aasland Ravndal define as the radical right is encompassed by 
the broad concept of extremism that we outlined earlier. While involving a slightly different 
usage of extremism, the distinctions drawn by Tore Bjargo and Jacob Aasland Ravndal have 
considerable explanatory value in the context of right-wing thinking and action. 


Within the Tore Bjargo and Jacob Aasland Ravndal taxonomy, the radical right works for 
change within the framework of democracy (for example, through changes to immigration 
policy), whereas extremists are willing to use, or more commonly express support for, 
non-democratic methods such as violence to achieve their political aims.*° There are 
radical right political parties in Western countries that participate in elections. 





85 Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above at page 2. 
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There is considerable overlap in the underlying thinking of those on the radical right and 
extreme right-wing. For legal and tactical reasons, those on the extreme right-wing tend 

to avoid public statements advocating violence and thus are not always easy to distinguish 
from those on the radical right. There has been a concerted effort by some extreme 
right-wing groups to tone down extreme discourse in order to reach and engage witha 
larger number of individuals. These groups may use less extreme figureheads and channels 
to reach new audiences and in this way shift the boundaries of what is “acceptable public 
discourse”.*° Further, given the implausibility of the expressed aims of some of those on the 
radical right, most particularly peaceful implementation of lawfully imposed requirements 
for Muslim individuals to return to their homelands (referred to sometimes as “remigration”), 
it is questionable whether associated rhetoric should be taken at face value. 


Another complication, particularly for counter-terrorism agencies, is that of those who 
advocate for or express support the use of violence and are thus on the extreme right-wing 
of Tore Bjorgo and Jacob Aasland Ravndal’s taxonomy, most are “talkers” and very few are 
actually committed to following through on, or materially supporting, extremist violence or 
terrorism. 


There are three classes of nationalism identified by Tore Bjo@rgo and Jacob Aasland Ravndal, 
although these are not mutually exclusive: 


1. Cultural nationalists” promote a version of nationalism in which the nation is defined 
primarily in terms of culture and history.®® They tend to reject the idea that some 
races are superior to others and focus on what they perceive as cultural differences, 
for example claiming that beliefs associated with Islam are incompatible with Western 
culture and democracy.®° Gaining in popularity after the attacks of 11 September 2001 
(and more recently the 2015 refugee crisis in Europe), these movements tend to present 
themselves as opposed to Islamist extremism rather than Muslim communities.°° While 
cultural nationalists have grievances against a variety of groups, their primary grievance 
is against Muslim immigrants. Many cultural nationalists claim there is a conspiracy 
to “Islamise” Europe through the “stealthy” imposition of Islamic Sharia law. Almost 
all Muslim individuals and communities in the West are seen through this frame, with 
evidence of “IsLamisation” seen everywhere - even in the availability of halal meat in the 
West.°" The radical right call for the protection of Western or European culture through 
policies such as banning the building of masajid in Western countries and stopping all 
Muslim immigration.” 





86 This is referred to as shifting the “Overton window” see Jacob Davey and Julia Ebner (2017), footnote 76 above at page 15. 


87 |t is worth noting that this refers only to cultural nationalism as it relates to the academic literature on the far right. The concept 
of cultural nationalism is used differently by political philosophers who argue for forms of civic or liberal nationalism. See for 
example: Will Kymlicka Multicultural Citizenship: A Liberal Theory of Minority Rights (Clarendon Press, Oxford, 1995); Yael Tamir 
Liberal Nationalism (Princeton University Press, New Jersey, 1993). 


88 Peter Davies and Derek Lynch The Routledge Companion to Fascism and the Far Right (Routledge, London, 2002) at page 217. 
89 Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above at pages 4-5. 


°° Toby Archer “Breivik’s Mindset: The Counterjihad and the New Transatlantic Anti-Muslim Right” in Max Taylor, PM Currie and 
Donald Holbrook (eds) Extreme Right-Wing Political Violence and Terrorism (Bloomsbury Academic, London, 2013). 


8" Alexander Meleagrou-Hitchens and Hans Brun, footnote 80 above at page 1. 


%° Alexander Meleagrou-Hitchens and Hans Brun, footnote 80 above at page 28. 
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2. Ethno-nationalists/ethnic nationalists tend to emphasise differences between ethnic 
groups (based on cultural and linguistic differences), rather than promoting racial 
hierarchies. They believe that all ethnic groups, including Europeans, have a right 
to protect their unique culture and identity. Ethnic mixing is seen to be harmful and 
they often have grievances against a wide range of groups.°* Examples of this type of 
ideology are the Identitarian®> movements in Europe and the more moderate wing of 
the “Alt-Right” (sometimes referred to as the “Alt-Lite or Alt-Light”) in the United States 
of America. Self-identifying ethno-nationalists generally do not encourage or support 
violence in public, although are often found either explicitly or implicitly supporting 
violence within closed groups. 


3. Racial nationalists define the ideal nation in racial terms, embracing the idea of an 
original state of society that existed before the ethnic make-up was altered (by waves 
of immigration).°° They fight for a society based on racial purity and the separation of 
races, drawing inspiration from National Socialism (Nazism), fascism and varieties of 
white supremacy. Racial nationalists often embrace anti-Semitic conspiracy theories 
that Jews promote immigration, equality and racial mixing to destroy the “white race”. 
Cultural nationalists and ethno-nationalists also often subscribe to these same 
anti-Semitic conspiracy theories. They tend to reject the values of democracy and 
human rights and consider violence a legitimate means to achieve their goals (though 
not always).%” 





°3 Ben Lee Overview of the Far Right (Centre for Research and Evidence on Security Threats (CREST), Lancaster University, United 
Kingdom, 2019) at page 5. 


°4 Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above at pages 4-5. 


°5 The Identitarian movement was founded in 2003 in the South of France as Les Identitaires or (in English) Generation Identity. 
It is a pan-European, white nativist group that advocates an ethnically and culturally homogenous Europe. 


96 Alexander Meleagrou-Hitchens and Hans Brun, footnote 80 above at page 26. 


7 Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above. 
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Common to much far right thinking is “the Great Replacement” theory, popularised by the 
French author Renaud Camus in 2011 (though drawing on a tradition going back to the 

19th century).°° This theory is that native inhabitants of Western or European countries are 
being replaced by non-European peoples through immigration and the growth of ethnic 
minority communities. Soon, immigration and declining white birth rates will result in the 
native (white) population becoming a minority. Muslim immigrants are typically singled 
out as a threat.°® This theory is closely linked to conspiracy theories popular among 
ethno-nationalists and racial nationalists (including white supremacists), including the 
ideas of “white genocide”,'°° “Eurabia”’™ and “cultural Marxism”.'°? 


As we will explain, the individual’s political thinking was far right in nature and showed many 
of the signs of ethno-nationalism (see Part 4: The terrorist). 


Race war and accelerationism 


Some on the extreme right-wing see race war - a large-scale clash between races pitting 
whites against all others - as inevitable, desirable or both. They sometimes allude to this 
using other terms, including “Rahowa” (a contraction of Racial Holy War) and “Day of the 
Rope”.’ “Accelerationists” advocate and commit acts of violence on the basis that they are 
likely to set off a chain of events involving action and reaction that will bring forward the race 
war and the hoped-for consequence of a white ethno-nationalist state. 


Use of the internet 


One of the most notable changes in the right-wing extremist movement has been its 
movement from the streets to the internet. In previous decades, the extreme right-wing 
mostly organised on the streets in gangs or protest movements. Today, extremism has 
substantially, although not completely, moved from physical meetings and street activism to 
the internet and social media.'™ 





98 Jacob Davey and Julia Ebner (2019), footnote 76 above. 
89 Australian Muslim Advocacy Network, footnote 77 above. 


°The term “white genocide” was first popularised by the white supremacist David Lane who argued that white populations 
are being replaced through immigration and integration, abortion and violence against white people. It differs from the Great 
Replacement theory in that it is often tied explicitly to anti-Semitic conspiracy theories - suggesting that Jewish people 
deliberatively orchestrate population change. See Jacob Davey and Julia Ebner (2019), footnote 76 above. 

‘©! The Eurabia theory was popularised in the early 2000s and claims that Western countries are slowly being brought under Islamic 
rule. The Oslo terrorist referenced the Eurabia concept. 

‘©? Cultural Marxism is a theory that has been in existence since the early 20th century. It has been popularised by the far right and 
claims that liberal and left-wing elites are conspiring to use cultural institutions - such as universities, schools, the media and 
government bureaucracies - to promote ideas that set out to destroy the values that underpin Western society. The promotion 
of feminism, multi-culturalism and gay rights are all seen as evidence of cultural Marxism. 


°3 This comes from The Turner Diaries, a novel written in 1978 by neo-Nazi leader William Pierce (under the pseudonym “Andrew 
Macdonald”). In the novel, “The Day of the Rope” refers to the day white supremacists conducted mass lynching of all “race 
traitors” including politicians, journalists and women in relationships with non-white men. 


'4Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above at page 13. 
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Right-wing extremists were some of the earliest to use the internet for extremist purposes.’ 
For example, the world’s largest white supremacist website, Stormfront, was established 

in 1996."°° More recently, the extreme right-wing has exploited the power of the internet 
through an array of online platforms and spaces, which it uses to connect with like-minded 
people and ultimately to recruit new members, some of whom have committed acts of 
violence and terrorism.'” Indeed, lone actor right-wing extremist terrorists, such as the 
individual, are never quite alone as they are often part of virtual communities on the 
internet.'°° 


People from different ideological viewpoints (Identitarians, neo-Nazis and incels) are 
converging on similar platforms.'°° Research suggests that these platforms are instrumental 
in spreading right-wing ideology across different online communities, including more 
mainstream ones."° The European anti-Islamic vigilante group, Soldiers of Odin, has used 
Facebook as a propaganda and recruitment tool to spread anti-Muslim hate globally. 
Researchers estimated that the Pan-European white nativist group known as 

Generation Identity had - as of May 2019 - approximately 70,000 followers on its official 
Twitter account.™ The main accounts of these groups have subsequently been banned 

from Twitter and Facebook, although groups such as these often use unbranded pages to 
avoid these bans. 


As extremist content is increasingly removed from the major platforms, right-wing extremists 
are gathering more and more on unmoderated fringe platforms. The platform Gab (a hybrid 
of Twitter and Facebook) was established in 2016 in direct response to the removal of 
prominent far right and right-wing extremist figures from major social media platforms. The 
site has been widely described as a “safe haven” for right-wing extremists. By the end of 2018 
it had approximately 450,000 users and had posted approximately 30 million comments."” 

It sees “populist political candidates, Identitarians, neo-Nazis and alt-right trolls mingle, 
allowing for the transfer of ideas which leads to a more cohesive ideology”."* Gab came 

to public attention when it emerged that the man who killed 11 people at a Pittsburgh 
synagogue in October 2018 had been an active user." 





1°5 Jessie Daniels Cyber Racism: White Supremacy Online and the New Attack on Civil Rights (Rowan and Littlefield, New York, 
2009). 
?°6Florian Hartleb Lone Wolves: The New Terrorism of Right-Wing Single Actors (Springer, Switzerland, 2020). 


'°7 Maura Conway, Ryan Scrivens and Logan Macnair Right-Wing Extremists’ Persistent Online Presence: History and Contemporary 
Tends (International Centre for Counter-Terrorism, 2019) at page 2. 


108 Tore Bjorgo and Jacob Aasland Ravndal, footnote 64 above at page 2; Florian Hartleb, footnote 106 above. 

199 Jacob Davey and Julia Ebner (2017), footnote 76 above at pages 25-27. 

"° Jacob Davey and Julia Ebner (2019), footnote 76 above at page 24; Australian Muslim Advocacy Network, footnote 76 above. 
™ Maura Conway, Ryan Scrivens, Logan Macnair, footnote 107 above at pages 6-7. 

"? Maura Conway, Ryan Scrivens, Logan Macnair, footnote 107 above at page 13. 

"3 Jacob Davey and Julia Ebner(2017), footnote 76 above at page 26. 


™4 Maura Conway, Ryan Scrivens, Logan Macnair, footnote 107 above at page 9. 
y, Ry’ g pag' 
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Other platforms that were not set up for hosting right-wing extremist content - including 
Reddit and 4chan and some online gaming platforms - have been “hijacked” by right-wing 
extremists. After the 15 March 2019 terrorist attack, a popular Reddit pro-President Trump 
forum (or “subreddit”), “The_Donald” contained posts justifying the attack and promoting 
anti-Muslim hate,"> although it has subsequently been removed by Reddit. 


4chan started by providing forums for subcultures of young people and Japanese manga 
and anime enthusiasts."° Over the years, these forums expanded to include a wider range 
of topics contained on image boards. These boards are entirely anonymous, with no user 
details or logins required. 4chan’s “politically incorrect” board is infamous for being 
dominated by extreme right-wing content. 8chan was basically “a more extreme version of 
4chan” and “was known as being a haven for [right-wing extremist] causes almost from its 
founding”."” In 2019 it was associated with four deadly terrorist attacks - the 15 March 2019 
terrorist attack, a synagogue attack in Poway, California on 27 April 2019, a Walmart attack in 
El Paso, Texas on 3 August 2019 and a mosque attack in Baerum, Norway on 10 August 2019. 
These terrorist attacks were all perpetrated by individuals who were active on 8chan. Each 
attacker pre-announced their intentions, and two of them uploaded their manifestos, on the 
platform’s forums."® 


In the past, YouTube has been often associated with far right content and radicalisation. 
There has been much debate about the way YouTube’s recommendation system works."9 
One theory is that this system drove users to ever more extreme material into what is 
sometimes said to be a “rabbit-hole”. An alternative theory is that the way in which YouTube 
operates facilitates and has monetised the production of videos that attract viewers and 

the widespread availability of videos supporting far right ideas reflects the demand for 

such videos.”° What is clear, however, is that videos supporting far right ideas have been 
very common on YouTube. YouTube has made changes in response to these criticisms, in 
particular to their recommendation system, so it is less likely to continue recommending 
increasingly extreme content and has also made it more difficult to access extreme content. 





"5 Jacob Shamsian “Reddit is Allowing a Major Trump-Supporting Community to Flourish Despite Members 
Defending the New Zealand Mosque Shooter” Business Insider (United States of America, 22 March 2019). 
https://www.insider.com/reddit-thedonald-cringeanarchy-new-zealand-shooting-mosque-muslims-2019-3. 


"6 Tore Bjorgo and Jacob Aasland Ravndal, footnote 64 above at pages 13-14. 
"7 Maura Conway, Ryan Scrivens, Logan Macnair, footnote 107 above at page 13. 
"8 Tore Bjargo and Jacob Aasland Ravndal, footnote 64 above at pages 13-14. 


"8 The system that generates recommended videos for the viewer based on similar content to videos selected and other viewers 
with similar viewing histories. 


° Kevin Munger and Joseph Phillips “A Supply and Demand Framework for YouTube Politics” (2019) Penn State Political Science. 
The “rabbit-hole” theory is also discussed. 
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In December 2017, the style guide for the far right website, the Daily Stormer, was leaked. 
It provides insight into the established conventional strategies and tactics used within 
extreme right groupings. A common tactic is to draw people in with a particular type of 
humour. Two passages are of interest: 


It should be understood first and foremost that the Daily Stormer is not a “movement site”. 
It is an outreach site, designed to spread the message of nationalism and anti-Semitism to 
the masses. 


This has worked out very well so far, and the site continues to grow month by month, 
indicating that there is no ceiling on this. As such, though we do mean to keep readers who 
are already in the know informed and entertained, it should always be considered that the 
target audience is people who are just becoming aware of this type of thinking. 


The goal is to continually repeat the same points, over and over and over and over again. 
The reader is at first drawn in by curiosity or the naughty humor and is slowly awakened to 
reality by repeatedly reading the same points. We are able to keep these points fresh by 
applying them to current events. 


Lulz 


The tone of the site should be light. Most people are not comfortable with material that 
comes across as vitriolic, raging, non-ironic hatred. 


The unindoctrinated should not be able to tell if we are joking or not. There should also be 
a conscious awareness of mocking stereotypes of hateful racists. | usually think of this as 
self-deprecating humor - !ama racist making fun of stereotype of racists, because | don’t 
take myself super-seriously. 


This is obviously a ploy and | do want to gas kikes. But that’s neither here nor there. 


Right-wing extremism in New Zealand 


Although the individual was an Australian citizen we do not describe the extreme 
right-wing in Australia. This is because we are not investigating the actions of Australian 
Public sector agencies. We briefly explain below what is known about the radical and 
extreme right-wing in New Zealand. This is not because the individual had any known 
connections with New Zealand individuals or groups. We later assess the activities of 
Public sector agencies in relation to right-wing extremism and the following description 
provides an explanation of what is currently known about right-wing extremism in 

New Zealand (see Part 8: Assessing the counter-terrorism effort). 
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Right-wing groups have been active in New Zealand for many decades and there have been 
at least three hate crime murders (committed by members of the Fourth Reich, a right-wing 
gang). Right-wing extremism in New Zealand has followed a similar trajectory to that seen 
internationally. Street-based neo-fascist and white power groups that were prominent up 
until the early 2000s have given way to new configurations of online groupings connected to 
an international alt-right movement.” 


Jarrod Gilbert and Ben Elley who study the alt-right in New Zealand have speculated that 
similar conditions exist here as have given rise to new alt-right groups elsewhere, such as the 
ongoing effects of the 2007-2008 Global Financial Crisis, growing income inequality anda 
shrinking middle-class. 


A small number of alt-right groups in New Zealand have emerged, including those targeting 
universities for recruitment. These groups appear to share similar ideological roots to 
groups on the far right in the United States of America and elsewhere. For example, one 
such group describes themselves as an “identitarian activist organisation committed to the 
revitalisation of our country and our people”, and opposed to immigration (amongst other 
things). These groups have avoided making overtly racist statements and use terminology 
“commonly employed by the alt-right to signal white nationalism while maintaining plausible 
deniability”.'”” 


5.4 Radicalisation to violence 


Most people with extreme right-wing views do not act on these views through violence. 
The process through which people develop commitment to a particular extremist ideology 
is called radicalisation. The process through which an individual comes to see violence as 
a feasible tool to address their grievances is called radicalisation to violence. 


Radicalisation to violence is highly individualised and there is not one model that can explain 
why people choose to commit violence. Rather, a person’s individual characteristics (their 
background, life experiences and personality), the social groupings they are part of and 

the wider socio-economic and political environment they live in, all interact in unique ways 
influence a person’s likelihood of radicalising.” 





™1 Jarrod Gilbert and Ben Elley describe the alternative right or “alt-right” as the online white supremacist communities that grew 
in prominence especially after the 2016 presidential election in the United States of America. See Jarrod Gilbert and Ben Elley 
“Shaved heads and sonnenrads: comparing white supremacist skinheads and the alt-right in New Zealand” (2020) KOtuitui: 
New Zealand Journal of Social Sciences Online. 


"2 Jarrod Gilbert and Ben Elley, footnote 121 above at page 289. 


3 Clark McCauley and Sophia Moskalenko “Mechanisms of Political Radicalization: Pathways Toward Terrorism, Terrorism and 
Political Violence” (2008) 20(3) Terrorism and Political Violence; Tahir Abbas “Far Right and Islamist Radicalisation in an Age of 
Austerity: A Review of Sociological Trends and Implications for Policy” (International Centre for Counter-Terrorism Policy Brief, 
2020); Noémie Bouhana, footnote 72 above. 
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Certain social, political and economic conditions can create environments that are more 
conducive to the development of extremist worldviews and behaviours. They may lead 
individuals to feel aggrieved and perceive violence as a legitimate way to act on their 
grievances.’* For example, the Global Financial Crisis caused economic insecurity and 
downward social mobility for many people. This created conditions in which some felt that 
their status and the material advantages they were owed were under threat, leading to a 
sense of grievance, frustration and a heightened (and regressive) commitment to protecting 
Western norms and values."° 


The conditions a person grew up in can play a role in their radicalisation, although precisely 
how will vary. Some people will progressively develop extremist views over their lifetime 
and others will be triggered by specific incidents or events.’° While there is no common 
socio-economic profile, a number of studies have shown those who are susceptible to 
right-wing extremism to be young men who are educated and with relatively stable 
socio-economic backgrounds, but with limited employment prospects.” Childhood 
exposure to violence and trauma can, in some cases, create a propensity to hostility, 
violence and authoritarian views, which can act as “emotional precursors” to a later 
adoption of extremist attitudes.'”® 


There are cases - particularly involving lone actor terrorists - where those who have engaged 
in violent extremism have personality disorders and mental health conditions.”2 Generally 
speaking though, violent extremists are thought more likely to have “personality issues” 
(rather than personality disorders) that can make them difficult to engage with and which 
can lead to social alienation.”° 





4 Kris Christmann Preventing Religious Radicalisation and Violent Extremism: A Systematic Review of the Research Evidence (Youth 
Justice Board/Office for Counter-Terrorism, United Kingdom, 2012); Magnus Ranstorp The Root Causes of Violent Extremism, 
(Radicalisation Awareness Network Issues Paper, 2016). 


5 Noémie Bouhana, footnote 72 above; Tahir Abbas, footnote 123 above; Jarrod Gilbert and Ben Elley, footnote 121 above. 
126 Tahir Abbas, footnote 123 above. 


7 Ineke van de Valk and Willem Wagenaar The Extreme Right: Entry and Exit (Racism & Extremism Monitor, Anne Frank House, 
Netherlands, 2010); Peter Sitzer and Wilhelm Heitmeyer “Right-wing extremist violence among adolescents in Germany” (2008) 
New Directions for Youth Development; Raffaello Pantucci, Clare Ellis and Lorien Chaplais Lone-Actor Terrorism: Literature Review 
(Royal United Services Institute Occasional Papers, 2015); Luke Munn “Alt-Right Pipeline: Individual Journeys to Extremism 
Online” (2019) 24(6) First Monday; Jarrod Gilbert and Ben Elley, footnote 121 above. 


128 Jessica Stern “Radicalization to Extremism and Mobilization to Violence: What Have We Learned and What Can We Do about It?” 
(2016) 688(1) The Annals of the American Academy of Political and Social Science; Peter Sitzer and Wilhelm Heitmeyer, footnote 
126 above. 


"9 Jayde Walker, footnote 64 above; Matteo Vergani, Muhammad Iqbal, Ekin Ilbahar & Greg Barton “The Three Ps of Radicalization: 
Push, Pull and Personal. A Systematic Scoping Review of the Scientific Evidence about Radicalization Into Violent Extremism” 
(2018) 443(10) Studies in Conflict & Terrorism. 


"3° Raffaello Pantucci, Clare Ellis and Lorien Chaplais, footnote 127 above. 
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Psychological distress brought about by particular experiences - a traumatic event, a change 
in employment status, inter-personal conflict - can also leave a person more receptive to 
extremist worldviews, or accelerate their radicalisation.™ 


Radicalisation is almost universally acknowledged as a group phenomenon in which social 
relations and networks play a key role in preparing people to commit extremist violence.” 
A person may come into contact with extremists in a multitude of ways, such as through 
existing networks of friends and family, public outreach by those involved in these groups or, 
increasingly, online engagement.’ When someone with generalised grievances comes into 
contact with individuals or groups who are able to provide a wider framework through which 
they can understand their grievances, extremist worldviews can be reinforced." 


Participation in a group enables a range of processes that may facilitate the use of violence, 
including a solidifying of dehumanising thinking, an increased perception of crisis and belief 
in the use of violence as a legitimate tool."> This is also the case for lone actor terrorists. 

A 2018 study analysing lone actor terrorists’ attack planning and preparation found that, for 
many, participation in extremist groups and access to extremist material and role models 
helped to break down any moral barriers they had to using violence. The wider radical 
environment within which they exist and draw inspiration from therefore plays an important 
role in their decision to undertake violence."°° 


Understanding what causes individuals to radicalise to violence is crucial for Public sector 
agencies, organisations, community groups and individuals working in preventing and 
countering violent extremism. However, radicalisation is not a linear process and factors that 
may contribute to one person’s radicalisation will not necessarily have the same effect for 
another. A person may move along the radicalisation to violence spectrum depending on the 
circumstances of their life at the time. All of these factors present considerable challenges for 
intelligence and security and law enforcement agencies in identifying and prioritising persons 
of concern within their finite resources. 





"31 Kris Christmann, footnote 124 above; Matteo Vergani, Muhammad Iqbal, Ekin Ilbahar & Greg Barton, footnote 129 above; 
Caitlin Clemmow, Noémie Bouhana and Paul Gill “Analysing person-exposure patterns in lone-actor terrorism: Implications for 
threat assessment and intelligence gathering” (2019) 19 Criminology and Public Policy; Bart Schruuran, Edwin Bakker, Paul Gill and 
Noémie Bouhana “Lone actor terrorist attack planning and preparation: A data-driven analysis” (2018) 63(4) Journal of Forensic 
Sciences. 


18? Jamie Bartlett and Carl Miller “The Edge of Violence: Towards Telling the Difference Between Violent and Non-Violent Radicalization” 
(2012) 24(1) Terrorism and Political Violence. 


"33 Daniel Koehler “The Radical Online: Individual Radicalisation Processes and the Role of the Internet” (2014/15) 1 Journal for Deradicalisation; 
Ineke van de Valk and Willem Wagenaar, footnote 127 above. 


"34 John Horgan, footnote 67 above. 
"35 Daniel Koehler, footnote 133 above; Luke Munn, footnote 126 above. 


136 Bart Schruuran, Edwin Bakker, Paul Gill and Noémie Bouhana, footnote 131 above. 
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Considerable effort has therefore gone into identifying indicators that could suggest someone 
is mobilising to violence and is actively planning a terrorist attack, such as whether a 

person is participating in online extremist discussion forums, has escalating anger about a 
grievance, is building psychological and/or technical capability (such as learning online how 
to make bombs) and is undertaking planning (such as conducting reconnaissance)."” These 
indicators are often generic and understanding their significance - for example, whether 
what an individual says online suggests they subscribe to an extreme right-wing ideology and 
are willing to act on it - requires a sophisticated knowledge of the dynamics of right-wing 
extremism. 





"37 Caitlin Clemmow, Noémie Bouhana and Paul Gill, footnote 131 above. 
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Chapter 6: Concluding comments 


In this Part we have introduced some of the key issues and concepts that will be referred to 
throughout our report. We have described changes at the national and international level 
such as increased diversity in New Zealand and the rise of the far right internationally. 


Understanding the rise of the far right is important for our inquiry as the 15 March 2019 
terrorist attack was carried out to advance an extreme right-wing ideology. We have 
explained that where a number of people are espousing similar extremist views, it is very 
difficult to predict who will go on to commit acts of violence as the vast majority of those 
who hold extreme views do not mobilise to violence. It is therefore important that the 
counter-terrorism effort is well equipped to identify people who advocate for, plan or 
otherwise materially support violent extremism and terrorism. We assess this effort in 
Part 8: Assessing the counter-terrorism effort. 


The changing make-up of New Zealand and the experiences of ethnic and religious 
communities, including Muslim communities, are central to our inquiry. Violence is not the 
only harm caused by extremism. There are a range of other behaviours that cause harm and 
undermine social cohesion and potentially create an environment more conducive to violent 
extremism. We have described a spectrum of harmful behaviours and will return to this 
throughout the report. 


A challenge for society and government is developing appropriate responses to harmful 
behaviours which are effective in limiting their occurrence and frequency but which do not, 
at the same time, exacerbate divisions. This requires responses that protect the right of 
all people to live safely and free from discrimination while not endangering human rights 
through the imposition of laws that undermine democratic values. 
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Term 


4Rs 
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Definition 


New Zealand’s integrated approach to national security 
includes four areas of activity known as the 4Rs - Reduction, 
Readiness, Response and Recovery. 





constitutional monarchy 


A system of government where there is a Sovereign (that 
is, monarch) who does not rule, but instead carries out 
constitutional, ceremonial and representational duties. 
The monarch, Queen Elizabeth II, is New Zealand’s head of 
state, while the prime minister is the head of government. 





counter-terrorism 
agencies 


New Zealand Police and the New Zealand Security Intelligence 
Service. 





counter-terrorism effort 


Counter-terrorism activities undertaken by relevant Public 
sector agencies to detect terrorists and disrupt their 
organisation, planning, preparation and attacks. 





the Crown 


The meaning of “the Crown” varies according to the context in 
which it is used. Generally, it describes executive government 
conducted by ministers and the relevant Public service 
agencies. It does not normally include organisations that 
have their own corporate identities, such as state-owned 
enterprises. 





far right 


A range of views and ideologies that are underpinned 

by a strong form of nationalism that holds that Western 
civilisation and its values are under threat from 

non-native people (particularly immigrants) and ideas 

(such as multiculturalism). Both the radical right and extreme 
right-wing fit under the broad umbrella of the far right. 


We do not use a hyphen for far right even when it is being used 
as an adjective. 
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Term 


Five Eyes 


Definition 


The intelligence sharing partnership between Australia, 
Canada, New Zealand, the United Kingdom and the United 
States of America. 





human intelligence 


Information derived from covert human sources, private 








(HUMINT) individuals who volunteer information, face to face meetings 
with individuals, community engagement and communications. 
iwi Te reo Maori (Maori language) term that refers to a tribe - 
a group of Maori people bound together by descent froma 
common ancestor and associated with a distinct territory. 
Maori The indigenous population of New Zealand. 





New Zealand Intelligence 
Community 


The Government Communications Security Bureau, the 
New Zealand Security Intelligence Service and the National 
Security Group of the Department of the Prime Minister and 
Cabinet (including the National Assessments Bureau). 





Pasifika 


A collective term for people of Pacific Island descent. 





polarisation 


Increasing divergence between individuals and groups holding 
different views. 





Public sector agency 


In general, an organisation that works for the government 
of New Zealand. 


In this report, “Public sector agencies” means the 217 
organisations listed in the appendix. 





Public sector agencies 
involved in the counter- 
terrorism effort 


The Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service. 
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Definition 


The process through which people develop commitment to a 
particular extremist ideology. People can radicalise to violence 
when they come to see violence as a feasible tool to address 
their grievances. 





radical right 


Ideologies and beliefs that form part of the far right. Those on 
the radical right generally use democratic means to achieve 
their aims and do not openly endorse the use of violence as a 
legitimate tool to achieve their aims. 





right-wing extremism 


Ideologies and beliefs that form part of the far right. Those on 
the extreme right-wing often believe that democracy should be 
replaced and see non-democratic means, such as violence, as 
legitimate tools to achieve their aims. 


We use a hyphen for right-wing even when it is not being used 
as an adjective. 





signals intelligence 
(SIGINT) 


Information derived from electronic communications 
(“signals” such as phone calls and emails), the primary 
component of which is communications intelligence (COMINT). 





Tauiwi 


A person in New Zealand of non-Maori descent. 





Te Tiriti o Waitangi 


Te reo Maori (Maori language) name for the Treaty of Waitangi 
- New Zealand’s founding document signed by Maori and the 
British Crown in 1840. 








trolling The deliberate act of making comments, usually on internet 
forums, to provoke a reaction from readers. 
Waitangi Tribunal A tribunal that considers contemporary and historical breaches 


of Te Tiriti o Waitangi. 
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Chapter 1: Introduction 


Our Terms of Reference included an expectation that we would connect with New Zealand’s 
Muslim communities on matters relating to the inquiry. We understood the importance and 
need to doso. We have also engaged with communities and we have heard from the wider 

New Zealand public during our inquiry. 





An important group of people we engaged with was the whanau of the 51 shuhada, and the 
survivors and witnesses of the terrorist attack and their whanau. This group of people could 
collectively be referred to as victims. We heard from some people that they dislike the term 
victim being used, while others said the term validates the harm they have experienced. 
Some people prefer the term survivor, while others dislike that term or prefer not to be 
labelled at all. For this report, we use the description “affected whanau, survivors and 
witnesses”. 
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This Part summarises their views and perspectives, as well as those of other individuals, 
communities and interest groups that we heard from. We engaged mainly through 

private meetings with people or organisations, including meeting regularly with our 
Muslim Community Reference Group. We also received 1,168 submissions from the public. 
We heard from a variety of people, providing us with diverse perspectives and experiences. 


These insights, experiences and views have been a central part of our inquiry and have 
been reflected in our report. In addition, we have endeavoured to address specific issues 
or questions raised by communities directly at the end of relevant Parts of our report. 


We note at the outset that the number of people we heard from represents a small 
proportion of all New Zealanders and they describe largely negative experiences. There 
have been clear and consistent themes in what we heard, and we believe the issues raised 
cannot be ignored. Hearing these perspectives helped inform the questions we put to 
Public sector agencies and the lines of inquiry we pursued to meet our Terms of Reference. 
In this Part we are primarily recording, and not assessing, what we heard. To the extent that 
assessment is necessary that comes in later Parts of our report. 


In the next chapter, we explain in more detail who we engaged with, why we engaged with 
them and how we approached the engagement process. 


Chapter 3 summarises what we heard about the impact of the terrorist attack on affected 
whanau, survivors and witnesses. The chapter highlights the ways in which the terrorist 
attack changed the lives of affected whanau, survivors and witnesses, which extends well 
beyond the direct harms that resulted from the terrorist attack, both physical and 
non-physical. We set out the view that the Public sector agencies’ systems of support, 
through which affected whanau, survivors and witnesses are navigating, are insufficient and 
have exacerbated the trauma and grief that they have already experienced. 
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Chapter 4 summarises what communities told us about the broader context in which the 
terrorist attack occurred. We heard from communities that in general New Zealand is viewed 
positively. But some people have been, and continue to be, subjected to unacceptable and 
harmful behaviour. What we heard from communities highlighted that there are parts of 
New Zealand society that do not align with the loving, welcoming New Zealand that came 
out in full strength immediately after the terrorist attack. We also heard that some 
communities perceive bias and deficiencies in Public sector agencies that create or 
exacerbate an environment in which they do not feel safe or supported. This has eroded 

the trust that some have in New Zealand’s Public sector agencies. 


Chapter 5 sets out what communities told us about matters that were outside the scope of 
our inquiry. In some instances, we wrote to relevant Public sector agencies to highlight these 
issues and where appropriate asked them to follow up the matters directly. 


Throughout our inquiry, the main points we heard were that: 


a) it is critical that Public sector agencies enable genuine community engagement in 
decision-making; 


b) Public sector agencies should value the unique expertise that community and other 
non-government organisations can contribute to decision-making on issues relating to 
their communities, and support them to do so; 


c) Public sector agencies’ ability to understand and meaningfully engage with communities 
is hindered by an insufficient appreciation of diversity and a lack of cultural competency; 


d) the preparedness of Public sector systems for the ongoing recovery of those affected by 
the 15 March 2019 terrorist attack has been found wanting; 


e) New Zealand is generally viewed in a positive light, but harmful, hateful and 
discriminatory behaviour remains commonplace; and 


f) embracing New Zealand’s diversity would support openness of thought and action 
and may lead to some harmful societal norms being challenged. 
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Chapter 2: Who we engaged with 


2.1. Affected whanau, survivors and witnesses 


Affected whanau, survivors and witnesses have been at the heart of our inquiry. We were 
very aware that the Royal Commission was established because of the tragedy of 

15 March 2019. This tragedy caused immense grief, hurt and loss, which will be felt by 
affected whanau, survivors and witnesses indefinitely. We had a deep sense of responsibility 
to provide them with answers to their questions, and reassurance where we could. 


We met with wives, husbands, parents, children, sisters, brothers, aunts, uncles and cousins 
of the shuhada or those who were attending the masjidain and survived the terrorist attack, 
some of whom were injured (physically and/or mentally) and others who witnessed aspects 
of the terrorist attack. 


We wanted people to have an opportunity to share their stories, and their evidence, in their 
own words. We wanted to hear their thoughts on anything that happened in the lead up to 
the terrorist attack, or ideas they had to help prevent such an attack from happening again. 
When needed, we asked questions to prompt discussion. 


We acknowledge the openness and willingness of affected whanau, survivors and witnesses 
to talk to us. These conversations have strengthened the inquiry by ensuring we kept people 
at the heart of our work and in this way have made this a better report. 


More detailed insights from our meetings and the reports we received are summarised in our 
companion publication What we heard from affected whanau, survivors and witnesses. 


2.2 Communities 


It was also important to us that we heard from many New Zealanders who had valuable views 
and perspectives to offer on the matters we were inquiring into. We heard from 
these groups: 


a) Our Muslim Community Reference Group, who provided us with knowledge and 
insights. They enabled us to better understand, from the members’ own experiences, 
how Public sector agencies interact and engage with New Zealand’s Muslim communities. 
We acknowledge their service, sacrifice, perseverance and the impact they made in 
helping us think about our role and responsibilities. The Muslim Community Reference 
Group’s frank advice and wise counsel, and the relationships built, are gratefully 
acknowledged and respected. 


b) Community and interest groups, including New Zealand’s Muslim communities 
and communities of affiliation or identity, interest, faith, place or national origin who 
provided us with a deeper understanding of common issues, concerns and themes. 


c) Members of the New Zealand public, who engaged with our submissions process. 
We received a total of 1,168 submissions - 1,123 from individuals (including researchers 
and academics) and 45 from organisations. 
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The submissions are summarised in our companion publication Summary of submissions. 


Our approach gave people and communities the freedom to talk about a wide range of 
topics, both within and outside the scope of our Terms of Reference. Although our Terms of 
Reference prevented us from making findings or recommendations on issues that were out of 
scope, we have recorded these issues and discuss them at the end of this Part. 
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Chapter 3: Impact of the terrorist attack on affected 
whanau, survivors and witnesses 


We have sought to reflect what we heard from affected whanau, survivors and witnesses. 
Some wanted to speak with us about the direct impacts of the terrorist attack, both physical 
and psychological, many of which will have long-lasting effects. There have also been a range 
of indirect impacts, often resulting from limitations in the support provided. In some cases, 
we heard that these experiences have been re-traumatising. A more detailed summary of 
what we heard is set out in our companion publication What we heard from affected 
whanau, survivors and witnesses. 


3.1 The terrorist attack 


Affected whanau, survivors and witnesses who had lost loved ones told us about how the 
terrorist attack affected them. Survivors who suffered physical injuries in the terrorist attack 
told us about the progress of their recovery. Some suffered severe injuries that will have 
lifelong impacts. 


We heard from people who had undergone multiple surgeries as part of their physical 
recovery but were not fully healed. Some will never regain the full use of their limbs. Some 
Survivors require full-time care and purpose-built facilities in their homes to help them live 
with their injuries. 


Many survivors could not return to work immediately, and some had to change vocation 
because of their injuries. While many survivors reported that their employers were 
supportive, giving them ample time off to recover, some people lost their jobs because they 
could no longer perform their tasks. A few survivors lost their businesses. 


Everyone we met with had experienced some form of psychological distress, such as anger, 
fear, stress, depression, anxiety, difficulty sleeping or survivor’s guilt. Many people had 
received, or were still receiving, counselling or other psychological support, while some were 
ineligible to receive publicly funded support. Some people said their spouses and children 
had also experienced psychological distress, and that support from Public sector agencies 
and non-government organisations was limited and for some ineffective. 


Affected whanau, survivors and witnesses also shared with us a range of secondary impacts, 
that is the impacts caused by the terrorist attack indirectly, either through the effect on 
people or as a consequence of measures taken, or not taken, to provide support to affected 
whanau, survivors and witnesses. Some people’s relationships (with spouses, whanau 

and friends) have been damaged. This included different views within a whanau about the 
receipt or distribution of the financial support provided as a result of the terrorist attack, or 
the toll on whanau members of supporting loved ones. It was common for whanau to come 
from overseas to support loved ones who had survived the terrorist attack. This could have 
adverse consequences for those who came. We were told that it: 
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... can be detrimental to family members who have successful careers and a stable, 
flourishing life overseas. In New Zealand their qualifications and work experiences will 
likely not be recognised and in the longer term this places undue stress and pressure onan 
already vulnerable family unit. 


For women who had lost their husbands, the consequences went beyond the emotional 
impact of the terrorist attack. In many instances this meant the loss of the main financial 
provider for the whanau. Some women are taking on additional roles within their whanau 

and learning new skills such as driving or financial literacy. Simultaneously, these women are 
carrying more of the parenting responsibilities while dealing with their own grief and recovery 
needs. This limits their time and ability to seek support for themselves, look for employment 
and to work or study. 


Some witnesses of the terrorist attack told us that they were not eligible for financial support 
from the Accident Compensation Corporation as they had not suffered any physical injuries. 
They felt that their mental wellbeing continued to be affected by stress, depression, anxiety 
and difficulty sleeping and that this would have lifelong impacts. They considered they were 
the “forgotten victims”. 


3.2 Public sector system of support 


Cultural understanding 


We heard that the services and support offered by Public sector agencies and some 
non-government organisations often do not appropriately acknowledge the diverse nature 
of Muslim communities and do not account for different needs. Over 50 countries of origin 
are represented among those who attend Masjid an-Nur and the Linwood Islamic Centre. 
There are language and cultural complexities that add to the already difficult environment 
of engaging with Public sector agencies. We were told that: 


... going on a year post the attacks, families are still waiting for adequate wrap around 
services that are culturally and linguistically responsive and which fully addresses their 
complex needs. 


Meetings set up by Public sector agencies sometimes did not have interpreters present, or 
appropriate languages were not offered. This compounded the challenges some people 
faced in understanding what support options were available and how to access them. In 
some cases, it meant that people were relying on whanau members to translate what Public 
sector agencies were saying. We were told of instances where some people felt that their 
whanau member was not impartial or may not have been passing on all relevant information. 
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Policies and practices required to support people’s recovery 

We heard about how Public sector agencies have been engaging with affected whanau, 
survivors and witnesses. While people commented on the overall generous support from 
the public and Public sector agencies in the direct aftermath of the terrorist attack, we also 
heard that Public sector agencies have been uncoordinated, rules-bound and inflexible in 
their approach to offering support. Some people said there is a disconnect between what 
ministers have promised publicly and the reality of how officials are dealing with individual 
situations. 





We also heard that in some cases the Public sector support available to people and 
communities affected by the terrorist attack is inadequate, or those who are eligible for it 
are not always made aware of what they are eligible for. We heard that the Public sector 
agencies’ one-size-fits-all approach has not been sufficient. 
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Many said that most of the support being offered by Public sector agencies is focused on 
short-term assistance, which does not account in a culturally appropriate way for the 
ongoing and long-term needs of the communities deeply affected by the terrorist attack. 
For example, we were told that Recovery activities needed to include long-term 
community-building initiatives that enable these communities to be self-sufficient and not 
dependent on the state. This could include initiatives such as interest free loans (that allow 
for religious restrictions on borrowing) to support their businesses. 


We heard of experiences that have been re-traumatising or have caused additional stress. 
We were told that: 


If trauma speaks to one’s inability to speak; the inability to articulate, come to terms with, 
and make sense of loss, then in many ways subsequent experiences with government 
agencies in the months since the attacks have been for many a concerted process of 
re-traumatisation, since they have perpetuated the survivors’ inability to recover. 


Public sector agencies and non-government organisations do not have a common definition 
or eligibility criteria for those who identify as victims. We heard that eligibility for support 
often involved strict interpretations of rules and that criteria were applied inconsistently. 
This was confusing to those affected. The level of support offered sometimes differed 
depending on the organisation or individual offering it. All of this has left some people with 
the view that Public sector agencies and non-government organisations are creating a victim 
hierarchy or a priority list of victims, causing grievances and straining relationships. 
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We were told about the importance of Public sector agencies employing a people-centred 
approach to support the recovery of affected whanau, survivors and witnesses. Critical 
elements of this are that affected whanau, survivors and witnesses are provided with 

the opportunities and space to be heard and listened to in a culturally and linguistically 
appropriate manner, and that they are engaged in the development of immediate, medium 
and long-term solutions rather than just informed or consulted on solutions. We were told: 


It is paramount to elevate the voices of victims. Victims have sobering sentiments as 
well as ideas for solutions to key issues, but struggle to be heard on these ideas. 


Support services 


We heard from some people that the financial support provided to them immediately after 
the terrorist attack had been helpful. But we also heard from people who were struggling 
to cope financially, on top of the other challenges they were facing, particularly as financial 
support was scaled back over time. 


Some survivors with physical injuries said they felt pressured to return to work by the 
Accident Compensation Corporation despite medical advice that they were not ready. 


A few people felt that the Accident Compensation Corporation did not have sufficient 
flexibility in its systems for an event such as this, and it was not taking into account the 
complications caused by firearms injuries, such as retained bullet fragments and nerve 
damage. 


Some women whose husbands had been the sole income earner said they felt pressured by 
the Ministry of Social Development to place their preschool children in care so they could 
find work. 


Some people told us that Public sector agencies do not account for the recovery needs of 
those who witnessed the terrorist attack but were not physically injured. We have heard of 
the post-traumatic stress being suffered by many of these people, whose symptoms include 
difficulty sleeping and recurrent mental images of the terrorist attack. Some witnesses 

of the terrorist attack who did not suffer physical injuries were not provided with Public 
sector support until third-party advocates stepped in to assist. Others who have tried to 
access support have been told they are not eligible for publicly funded recovery and support 
services. 


Many of those we met with told us about the challenges they faced getting visas for whanau 
members to come to, or remain in, New Zealand to help them while they were getting their 
lives back together. People were concerned about the requirement for someone to have 
been in New Zealand on 15 March 2019 to be eligible for the discretionary visa that the 
Government had put in place for support people. Some expressed their frustration that 
allowances were not being made in what were exceptional circumstances. 
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We heard of the need for immigration issues to be considered on a case-by-case basis 

given the complexities associated with the circumstances of each whanau. For example, 
members of the Somali community who had lost loved ones or had survived the terrorist 
attack faced challenges due to New Zealand not recognising the Somali passport as a 

valid travel document (although it is accepted by some Public sector agencies for refugee 
purposes). This meant it took significantly longer to get the whanau support they needed. 

In some cases, affected whanau were not granted visas until late 2020. These visas were 
granted after we wrote to Immigration New Zealand outlining these issues and seeking their 
assistance to progress matters due to the negative impact on the wellbeing of these whanau. 


We were told of the deficiencies in support available to affected whanau, survivors and 
witnesses in relation to the criminal justice system. A submission made on behalf of some 
of this group spoke of the “deep widespread trauma in being excluded from the criminal 
process and being unable to have input into or feel any meaningful participation in this 
process”. 


We heard of disillusionment and a loss of hope and trust, largely due to the lack of 
acknowledgement of victims in the criminal justice process and the feeling that they were 
not being heard. That submission also noted that the issues and concerns that victims have 
had in this specific case were seen to be a demonstration of the issues that victims face more 
broadly in New Zealand’s criminal justice system. There were complaints of a disconnect 
between the principles of victims’ rights as set out in the Victims Code,’ and victims’ 
experiences of the criminal justice system, including re-traumatisation. 


We heard that the purpose and scope of a victim impact statement was not clearly explained 
to many affected whanau, survivors and witnesses. We were told this impacted on what they 
wrote in their victim impact statement. In many cases this was compounded by a lack of 
interpreters. 


Some people said that the narrow and prescriptive format of the victim impact statement 
template produced by the Ministry of Justice and provided to affected whanau, survivors and 
witnesses was not appropriate given the unique circumstances in this case and was further 
disempowering. 


' The Victims Code sets out how you can expect to be treated when you are a victim of crime, 
http://www.victimsinfo. govt.nz/support-and-services/victims-rights/victims-code-full-text-version/. 
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3.3. Solutions proposed to improve the Public sector’s system 
of support 


What we heard from affected whanau, survivors and witnesses reflected much hurt and 
frustration with Public sector agencies. It was distressing for them to have to outline their 
concerns over and over again to different employees in the same Public sector agencies, 
and with different Public sector agencies that were not working in a collaborative manner. 
We heard that Public sector agencies did not adequately recognise the needs of affected 
whanau, survivors and witnesses, and did not provide sufficient integrated and tailored 
support services to help their recovery from the terrorist attack in the medium to long-term. 


Affected whanau, survivors and witnesses shared with us their thoughts on how Public 
sector agencies could improve their support for whanau recovering from a future attack and 
how this interrelates with their experience of the criminal justice system. It was suggested 
that Public sector agencies need to have flexible plans in place to respond to the medium 
and long-term recovery needs of affected whanau, survivors and witnesses, and that these 
plans must be co-designed with affected whanau, survivors and witnesses in a culturally 
and linguistically appropriate manner. For example, the terrorist attack on 15 March 2019 
resulted in a range of recovery needs from an immigration perspective. Some suggested that 
Immigration New Zealand could create a special visa for whanau members to travel in and 
out of New Zealand for a few years, for support purposes, to reduce the burden for grieving 
people. 


We were told that Public sector agencies should be seeking cultural and linguistic expertise 
so that they can understand: 


a) the challenges faced by, and recovery needs of, traumatised people and communities; 


b) the challenges that people working with traumatised people and communities are likely 
to face and ensure that there is interpretation support available; 


c) how people who have experienced a terrorist attack are likely to receive and process 
information; 


d) how to build trust-based, collaborative relationships with ethnic and religious 
communities; and 


e) how community engagement activities can support psychological recovery needs. 
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One submission from affected whanau, survivors and witnesses recommended that the 
government establish a long-term restorative justice process co-designed by affected 
whanau, survivors and witnesses. The restorative justice process would be established to 
address the ongoing complex needs of affected whanau, survivors and witnesses. It would 
provide affected whanau, survivors and witnesses with an opportunity for accountability, 
to heal, to have a voice and vindication (including compensation in appropriate cases). 


The process would require the full engagement of all relevant Public sector agencies and 
relevant non-government agencies. This means a process that caters for affected whanau, 
survivors and witnesses that is conducted in a space in which they are comfortable. The 
submission emphasised that it is important to determine the needs of affected whanau, 
survivors and witnesses. The submitter also noted that: 


... coronial processes, which is another investigatory process (and which will incorporate 
the circumstances of death including after the shooting had commenced, the police and 
medical response etc.), rather than standing alone as yet another process - and likely 
re-traumatising process - to be added on to the victims’ post-shooting legal experience 
should instead be incorporated into a single restorative process within which both coronial 
considerations (and thus any recommendations for prevention under the Coroners Act for 
example) as well as other consonant restorative principles and practices. 


The best way to put in place a restorative justice process would be to hear from affected 
whanau, survivors and witnesses themselves, then analyse what needs are being met and 
those that are yet to be met: 


The most fundamental and critical need right now is for victims to be heard and involved 
in long-term solutions. The above recommendation [for a restorative justice process] 
incorporates a victim-centred approach, free from the bureaucratic system that allows 
victims to enable themselves with the tools to help themselves and their communities, 
long-term. 


We were told that a coronial inquiry should be held to provide an independent assessment 
of the response to the terrorist attack including the response of New Zealand Police and 
hospitals and ensure that all outstanding questions are answered. 


Some affected whanau, survivors and witnesses proposed that there should be a minister 
responsible for affected whanau, survivors and witnesses of the terrorist attack and the 
implementation of our recommendations, similar to the Minister Responsible for Pike River 
Re-entry, and that all relevant Public sector agencies would report to that minister. This 
would ensure transparency and accountability, and give communities confidence that 
changes will happen. They said that it should not be left to communities alone to hold the 
government and Public sector agencies to account. 
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Chapter 4: What communities told us about the 
broader context in which the terrorist attack occurred 


4.1 Introduction 


This chapter sets out the themes from our meetings with individuals, academics, 
communities and interest groups, and the themes contained in written submissions. 
It draws on what we learned from our Muslim Community Reference Group about the 
broader context in which the terrorist attack occurred. 


We heard from a range of people about their views of New Zealand and their personal 
experiences. Many people we met have moved to New Zealand from overseas, often in 
search of a better life. The length of time they have lived here ranges from a few months 
to decades. They shared their experiences of their lives in New Zealand and their 
interactions with Public sector agencies. They gave us their suggestions for what, in their 
view, needed to change to prevent such a terrorist attack in the future. 


We predominantly heard from ethnic and religious communities, including Muslim 
communities, and there were consistent themes in what we heard, as set out below. 
For some people, their experiences changed after the 15 March 2019 terrorist attack. 


4.2 New Zealand is viewed positively, but widespread racism, 
discrimination and Islamophobia exists 


Many people said their experiences of New Zealand and New Zealanders before the terrorist 
attack of 15 March 2019 were positive. New Zealand felt peaceful and safe to them, and they 
never thought a terrorist attack could happen here. They felt that New Zealanders were very 
accepting and friendly people. We heard consistently that at the local level, most people are 
welcoming. 


Despite these positive experiences, many of the same people that we heard from had 
personally suffered racist incidents or knew of whanau and friends who had. Women in hijab, 
for example, reported experiencing street harassment and felt uncomfortable reporting the 
incidents to New Zealand Police or other Public sector agencies. They felt their hurt and 
frustration would not be taken seriously by New Zealand Police or other agencies. 


People said they had experienced discrimination at work, in trying to find a job, or said their 
children had been bullied at school. For example, we were told: 


A [Muslim] tertiary student reported being warned she would not get a job if she turned up 
to an interview “dressed like that”. Secondary schools students reported experiencing a lot 
of discrimination and harassment. Some have had their scarves torn off and were punched, 
and ending up in fist fights as a result. Even teachers have challenged students about the 
actions of ISIS, and other terrorists. 
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Some people we heard from believed the root cause of the discrimination they experience 
is a combination of ignorance and racism. They felt that this racism can often be both 

at a personal and institutional level and subtly permeates parts of New Zealand society. 
The Muslim Community Reference Group shared these views. 


We were also told that there are some general misunderstandings about Islam. Some 
people in Muslim communities believe they are subject to guilt by association with Islamist 
extremist terrorism. We heard of increased harassment and discrimination faced by some 
New Zealand Muslim individuals and communities when Islamist extremist terrorist attacks 
occurred overseas. 


The lack of awareness in New Zealand about ethnic and religious communities is considered 
by many to be a barrier to embracing diversity. The Muslim Community Reference Group 
noted that in New Zealand, people learn about Muslim culture and beliefs primarily through 
the media. 


Members of the Muslim Community Reference Group and some submissions also expressed 
concerns about the way that local and international media reporting has contributed to 
increased anti-Muslim views in New Zealand and around the world. They believe that 

this occurs through inaccurate reporting, and a general failure to challenge racist and 
extremist remarks. Many people we talked to or heard from shared this belief. Many people 
commented that biased reporting had increased significantly since the terrorist attacks on 
11 September 2001 in the United States of America. We were presented with research and 
statistics on the representation of Islam in New Zealand media to support this view. 


We heard similar sentiments from many people that the way that New Zealand Public sector 
agencies and politicians talk about national security issues adds to anti-Muslim rhetoric. 
We heard that what people say really matters, particularly people in leadership positions. 
One person told us that: 


We think too often about minorities - “they are us” - emphasising their difference even if 
that was not the intent. Language is critical. 


We were told by some people that community relationships were limited and that hostile 
rhetoric was increasing, for instance about immigration, and that it felt like New Zealand’s 
social cohesiveness was diminishing. 


We also heard that the challenges faced are not unique to Muslim communities. We heard 
from the Muslim Community Reference Group that “different ethnic groups need to be 
included in this, they are also targets of racism”. For example, some religious communities 
and Maori also told us about their experiences of racism, adversity and injustice. 
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In this vein, we were told that our recommendations should support a better and safer 

New Zealand not only for Muslim communities, but also for the range of communities that 
make up New Zealand. Our recommendations need to be “forward-looking and inclusive of 
all New Zealanders regardless of faith, ethnicity or culture”. 


Since 15 March 2019, communities report that some people feel less safe, especially those 
who have visible faith markers. We heard from a few people who said they are worried about 
their whanau and friends who wear hijab. We heard from one group that: 


We stopped feeling safe in New Zealand after the 15 March attacks - this event has shaken 
us, especially our women who tend to be the “flag bearers” as their dress is a visual 
demonstration of their faith. 


Some women said they felt more scared going out on their own wearing hijab. They told 
us they avoided going to public places and doing things that used to be part of their daily 
routine, such as taking their children to school or going on an evening walk. 


On the other hand, some people feel just as safe as before, or safer, and noted they are 
receiving support from non-Muslim New Zealanders. We heard of situations where 
once-distant neighbours were now regularly speaking with their Muslim neighbours and 
of women openly acknowledging and engaging with Muslim women on the street. 


4-3 New Zealand law does not sufficiently protect people from 
hate-motivated crime and hate speech 


Many told us the terrorist attack occurred in a context of widespread racism, discrimination 
and Islamophobia, where pre-judgements or hostile behaviours (including hate-based 
threats and attacks) are rarely recorded, analysed or acted on. We were also told that racism 
can come in many forms, from harsh comments to offensive actions. We heard that racism 
occurs frequently in public spaces, often comes from strangers and can escalate to violence. 


There are many positive things New Zealanders can learn from one another in an increasingly 
diverse country, but we were told not everyone thinks that way. We were referred to a 
number of incidents of politicians making remarks that disparaged ethnic and religious 
communities. These incidents were seen as unacceptable, but at times common in 

New Zealand. 


We heard from many people about their concerns that harmful behaviour towards people 
based on their national origin, religion, gender identity, disability or sexual orientation, 
which vary from verbal to physical in nature, are not taken sufficiently seriously by 

New Zealand Police. 
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A particular frustration we heard was that harmful behaviours and allegations of hate crimes 
are not recorded by New Zealand Police. We heard much about hate crimes and related 
issues more broadly, which are discussed further in other chapters of this Part. Some people 
we met with said they had reported racist incidents to New Zealand Police, but there was no 
outcome. This was either because the report was not formally recorded, New Zealand Police 
did not take the incident seriously or they did not hear back from New Zealand Police 

about what had been done in response to their report. One submission referred to a threat 
that was made in February 2019 to burn a Qur’an outside a masjid, coincidentally on 

15 March 2019 (see Part 6, chapter 2). The submitters felt that New Zealand Police had not 
taken this threat sufficiently seriously, and that it took some time for New Zealand Police to 
report back to them about any action undertaken. 


We heard from our Muslim Community Reference Group that: 


... there is a lack of trust that police will act on reports or claims. People eventually choose 
not to report their issues or experiences because they feel nothing will be done. 


This was a common sentiment that we heard from a range of communities. However, 

we did hear from a few people of a perceived change in attitude from New Zealand Police 
since 15 March 2019. They said they had reported hate-motivated incidents since 

15 March 2019 and felt these had been taken seriously. On the other hand, some 

people indicated to us they still had concerns about New Zealand Police responses to 
hate-motivated incidents, and that the New Zealand Police practice for responding was 
not consistent across the country. 


For migrants in particular, we were told that there are often additional elements that can add 
to a reluctance to report racist or hateful incidents to New Zealand Police. We heard of some 
migrants feeling “lucky” or “grateful” to be in New Zealand, and not wanting to complain 

as this might impact them being able to stay in the country or risk them being seen as a 
“trouble-maker”. Some migrants said that their perception of New Zealand Police or other 
authorities is sometimes influenced by their experiences in the countries they have come 
from, and that such experiences can discourage speaking up or reporting. 


Some people said they had noticed an increasing number of racist incidents in a range of 
settings, and more racist comments on social media since 15 March 2019. 
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A few people told us that the way New Zealand handles hate speech is important, given its 
freedom of speech rights. They believe that further restricting and criminalising hate speech 
would be misconceived, as it is likely to drive hate speech underground where it cannot be 
challenged and, in this way, contribute to more radicalisation. However other people held 
contrary views, believing that hate crimes should be established as a separate category of 
offence and that they should include acts of hatred that target people and property. We 
heard that: 


[There is] a clear line between the freedom to openly and publicly discuss, defend, and 
teach different positions on moral and social issues and theological matters, and professing 
hatred and inciting violence. While the former are necessary for the maintenance 

and progress of a free and democratic society, the latter are destructive for a free and 
democratic society. 


Nearly everyone we met with believed that confronting racism and prejudice would make 
New Zealand safer and contribute to preventing a terrorist attack in the future. They said 
that the key to eliminating racism lies in education at the primary, secondary and tertiary 
levels and that all New Zealanders need the tools to identify racism and prejudice and how to 
respond in a safe and calm manner. 


4-4 Solutions proposed to address racism, discrimination, 
hate crime and hate speech 


Our Muslim Community Reference Group made it clear to us that efforts must be undertaken 
by Public sector agencies, local government and the private sector to eliminate racism and 
discrimination, including: 


a) equipping the education system to implement programmes about the diverse nature of 
New Zealand’s communities; 


b) supporting communities and workplaces to reduce discrimination through programmes 
and resources to support knowledge about cultural, linguistic, national origin and other 
forms of diversity; 


c) promoting and celebrating diversity, including through public celebrations for key 
religious and cultural events; and 


d) publicly sharing positive stories about ethnic and religious communities. 


We heard that eliminating racism and discrimination should be a priority across all sectors, 
not just the Public sector, and action needs to be focused on all ages and communities of 
interest. We were told by some members of the Muslim Community Reference Group, and 
others we met with, that initiatives cannot be one-off - cultural competency needs to 

be part of continuing professional development and valued by both Public sector and private 
sector employers. 
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We heard that Maori history, insights and experiences, and a Maori worldview, would 
be invaluable in learning more about New Zealand, and that this and education about 
Te Tiriti o Waitangi should be incorporated in the implementation of anti-racism and 
discrimination programmes and initiatives. 


While the Public sector must drive efforts to eliminate racism and discrimination, 
members of the Muslim Community Reference Group emphasised the importance of 
encouraging, supporting and empowering communities to work together on these issues. 
These sentiments were echoed by others we heard from. 


Many people believe Public sector agencies should collect data to understand the extent of 
racism and discrimination and have the evidence base to design effective policy responses. 
Some suggestions were also made about legislative change to broaden the scope of hate 
speech offences, noting the delicate balance between peoples’ safety and freedom of 
expression. 


We were told that a system needs to be developed for reporting, collating and analysing 
complaints of hate speech and hate crimes. Others suggested a national hate crime action 
plan, with a whole-of-government approach to dealing with anti-social and unacceptable 
behaviours and preventing extremism, including the development of de-radicalisation 
programmes. 


One group called for regularly including Islam and Muslim communities in official and 
popular rhetoric. They told us: 


[This would involve] media in New Zealand making a conscious effort to normalise Muslim 
representations on screen, and to take a critical, rational, and ethical approach to priming 
and framing stories involving Islam, Muslims, and Muslim-majority countries and regions. 


To counter the media being the primary source of education about Islam and other religions, 
we were told that education about diversity needs to be provided by educational institutes, 
places of worship (including churches and temples) and direct personal engagement with 
Muslim communities. 


We were also told that the Public sector needed to put more resources into campaigns like 
Stand up to racism: That’s us, which is run by the Human Rights Commission. 


4-5 Experiences with the Public sector 


We heard that the terrorist attack took place in the context of a society, including Public 
sector agencies, which frequently misunderstands Muslim communities and cultural diversity 
more broadly, and in which many Muslim New Zealanders feel they face prejudice and 
discrimination. 
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Many people, community organisations and groups told us that Public sector agencies do not 
effectively explain to people how the information they provide will be used or shared. For 
example, people told us they had attended meetings with Public sector agencies to discuss 
community programmes, or to raise concerns about Public sector agency-led programmes. 
Afterwards, Public sector agencies often did not share notes of those meetings to ask 
whether they accurately reflected the discussion, nor did they confirm any agreed actions 
arising from the meetings or get back in touch to let attendees know what the outcome was. 


Some people spoke of being asked repeatedly for the same information from the same Public 
sector agencies, which further eroded their trust and confidence in the agencies. 


One group told us about their experiences trying to get issues specific to Muslim 
communities noticed by the Public sector, and of working with Public sector agencies ona 
potential national strategy to deal with issues raised by Muslim communities. They told us of 
their frustration at feeling they needed to constantly drive this work rather than supporting 
the Public sector agencies, that their voice was not being heard and that the work did not 
appear to go anywhere with little explanation as to why. The group talked about how they 
volunteered significant time and energy to support Public sector agencies to deliver, and felt 
let down by the agencies’ limited efforts. 


4.6 New Zealand’s counter-terrorism effort 


We heard from communities that they understand and generally support the objectives of 
the national security system. However, some people told us they believe the 15 March 2019 
terrorist attack demonstrated a “catastrophic failure” of the national security system. We 
were told by a submitter with experience in the national security system that: 


The assumptions that underpin these reflections are that there was systemic failure of the 
national security system - by definition a major terrorist attack resulting in the death of 
51 people cannot be anything other than a failure. |!am assuming the relevant agencies 
were taken by complete surprise, and there is not a single point of failure (e.g. a human 
error) that had a different course of action been taken would have prevented or disrupted 
the attack. My assumption is that the system was not looking and never had a chance to 
prevent the attack - hence the systemic failure. 


We also heard from some that the national security system had failed to prevent the terrorist 
attack as it was only focused on a perceived threat of Muslim individuals and communities 
while not focusing on any other threats. For example, one person told us: 


They were watching us, not watching our backs. 
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We heard that communities feel that they have limited visibility about what Public sector 
agencies are doing to keep them safe. Some communities reported to us that their 
engagement with agencies involved in New Zealand’s counter-terrorism effort feels 
one-sided - in that communities provide information to agencies, but it had not obviously 
been recorded in meetings, they do not receive a response about how that information is 
used and/or they do not see their advice being acted upon. Consequently, these people 
feel their advice is not being listened to or is not valued. 





We heard from communities that they feel the New Zealand counter-terrorism effort has 
been focused exclusively on Islamist extremist terrorism, and that this is not unique to 

New Zealand. One submission referred to the 2015 Review of Australia’s Counter-Terrorism 
Machinery, which assessed the threat environment exclusively in terms of Islamist extremist 
terrorism and explicitly linked violent extremism to Muslim individuals and communities. 
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For many of those that we heard from, a terrorist attack inspired by Istamophobia was not 
unforeseen. We heard that: 


The events of the day were presaged by so many tell-tell signs of its coming, all of which 
were evident and all of which were ignored by those who had power to act. 


Members of our Muslim Community Reference Group told us: 


We warned them of dangers, and they didn’t listen. 


We also heard from some people more broadly about their frustration that concerns they 
raised about the rise of right-wing extremism and Islamophobia in recent years were not 
acted on. Of the people we heard from who expressed a view about the activities of Public 
sector agencies, many were of the view that counter-terrorism agencies had failed to monitor 
the online posts of the individual and other people or groups with extreme right-wing views 
and they felt this failure allowed the attack on 15 March 2019 to occur. One submitter told us: 


It is inconceivable that New Zealand’s professional internet community was aware of 
the threat posed by alt-right radicals but [the New Zealand Security Intelligence Service] 
were not. 


We heard similar sentiments from some members of the Muslim Community Reference Group 
who had reported concerns about racism, discrimination and hate crimes to Public sector 
agencies including New Zealand Police, but they felt that their concerns were often not 

taken seriously or followed up. They told us that “we actually need to see evidence of 
[Public sector] agencies acting on our concerns in order for us to trust them”. In their view, 
counter-terrorism agencies are not identifying extremists (particularly right-wing extremists 
or white supremacists) due to preconceptions and bias about who poses a threat to 

New Zealand. In particular, we were told about the vulnerability of young men to 
sophisticated recruitment strategies from extreme right-wing groups and a belief that 

New Zealand’s counter-terrorism agencies are not picking up harmful extremists. 
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We were told that “even now, we are still being engaged with like we are the threat”. The 
Muslim Community Reference Group expressed that many of these issues stem from the 
fact that counter-terrorism agencies appear to have limited competency when it comes to 
Muslim culture. 


Many people and community organisations we spoke to or heard from believe there is 

low capability and capacity, if any, in relation to countering violent extremism 

(including from the extreme right-wing) in Public sector agencies involved in New Zealand’s 
counter-terrorism effort. 


Some submissions and people we talked to noted that while Public sector agencies might 
agree that intelligence resulting from diverse sources and collective efforts enhances 
outcomes, many believe that the agencies’ understanding of how to achieve these outcomes 
was limited. This meant these agencies could be taken by surprise by something that a 
diverse team might have known about and would have identified as an opportunity or a risk. 


We heard of the need for a counter-narrative to harmful extremism - or in other words, 
positive, alternative messaging. One submitter told us: 


Too often the government or community are silent on their messaging. That causes 
confusion and doubt. There needs to be strong messaging around the condemnation of 
any violent acts for whatever purpose and readily available information on supporting 
communities in identifying and dealing with disaffected members who are engaging in or 
have engaged in violent extremism. 


Many discussed the need for a strategy to prevent or counter extremism, believing that 
New Zealand had not taken sufficient action on this issue, despite governments in other 
countries doing so. 


Some members of our Muslim Community Reference Group said they believe that the 
New Zealand Security Intelligence Service’s activities and surveillance has often had a 
negative impact on their communities because it creates paranoia, suspicion and fear. 
Similarly, some Muslim communities believe the national security system is prejudiced 
against them, and they feel targeted. We were told “it is no secret that prior to these 
attacks, the Muslim community was under the microscope for being a potential threat to 
national security”. We also heard from non-Muslim communities who reported feeling 
targeted by the intelligence and security agencies. 


We were told about negative personal experiences with the national security system, such 
as recruitment approaches, with people being asked to provide information about Muslim 
friends and whanau to the New Zealand Security Intelligence Service. Some expressed 

to us that they were concerned about what would happen to them personally if they did 
not comply with requests for information. They were worried that, if they questioned the 
process, they might get in trouble with the New Zealand Security Intelligence Service and 
other Public sector agencies. 
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We heard stories from people who had been approached by counter-terrorism agencies but 
were unclear which agency they were from, or what the purpose of the engagement was. 
Some felt uncomfortable about the way in which they were approached and/or questioned 
by the counter-terrorism agencies. 


We also heard of a perceived power imbalance between counter-terrorism agencies and 
communities, and that people who are approached by these agencies are often unsure what 
their rights are. We heard that when approached, individuals and communities do not feel 
empowered or knowledgeable enough to effectively engage with counter-terrorism agencies 
and challenge them. 


Many people shared with us their personal experiences when entering and exiting 
New Zealand and their interactions with the border agencies - Immigration New Zealand 
and New Zealand Customs Service. 


We heard, particularly from ethnic and religious communities, including Muslim 
communities, of a belief that front-line staff from Immigration New Zealand and 

New Zealand Customs Service undertake racial profiling. Some of the experiences people 
shared with us included a perception that Muslim individuals entering New Zealand, 
including those born in New Zealand and/or travelling on a New Zealand passport, face a 
longer screening process than non-Muslim travellers. This was echoed by some members 
of the Muslim Community Reference Group, with comments such as: 


... we are targeted [by Immigration New Zealand and New Zealand Customs Service]. 
This bias could perhaps allow other potential threats to slip through security. 


We heard of personal experiences or those of friends and whanau. For example: 


A few years ago my son travelled overseas for business ... When he came back he was 
interrogated for a couple of hours. His laptop was looked at as well his phone and he 
wasn’t sure why. The next time he travelled the same thing happened and he was very 
frustrated and started asking why? He travelled often to bring business to New Zealand. 
He had a New Zealand passport, so we do not understand the need for him to be screened 
at New Zealand’s border each time he returned from travel? He was bluntly told in the end 
that they wanted to make sure he is not affiliated with ISIS! 
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4-7. Solutions proposed to improve New Zealand’s 
counter-terrorism efforts 


Communities provided a range of suggestions for improving New Zealand’s counter-terrorism 
effort. 


Some people felt that New Zealand Police and the intelligence and security agencies should 
be more proactive in identifying and assessing possible terrorist threats from ideologies 
other than Islamist extremism. Specifically, they suggested that these agencies should 
increase monitoring of anti-Muslim, extreme right-wing and other threats to vulnerable 
communities on social media. They suggested that online threats should be taken more 
seriously and investigated to determine the terrorism threat to New Zealanders. 


We heard that the way New Zealand’s National Security and Intelligence Priorities are set 
needs to change (see Part 8, chapter 3). People told us that the process for setting and 
reviewing New Zealand’s National Security and Intelligence Priorities should be opened up 
to a Parliamentary and/or community process. This would help ensure that the National 
Security and Intelligence Priorities are robustly debated, and enable a directed conversation 
amongst New Zealanders on risks and threats to security and prosperity. 


We were told that the government must publicly set out its strategy for preventing and 
countering violent extremism and terrorism and there should be significant community 
involvement in its development. One submitter noted that while most countries have a 
comprehensive national security strategy, New Zealand continues to rely on a National 
Security System Handbook that mostly addresses the Response to crises rather than 
Reduction, Readiness and Recovery activities. 


Some people suggested more training for staff in New Zealand Police and the intelligence 
and security agencies to enable diversity of thinking to protect against groupthink and thus 
recognise escalating threats sooner. 


It was proposed that New Zealand should allocate counter-terrorism resources based on 
empirical evidence and coordinate with international partner agencies. The Australia 

New Zealand Counter-Terrorism Committee’s work on counter-terrorism policy, capabilities, 
legislation and the enabling environments of all forms of extremism was identified as a 
useful vehicle. 


There was also a call for both prevention programmes and de-radicalisation programmes 
for members of extremist movements, radical groups and some gangs to be funded by 
the government and developed and delivered in partnership with relevant communities 
and experts. 
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4.8 The firearms licensing system 


Various communities and groups, including some members of the Muslim Community 
Reference Group, questioned why the Government was amending the Arms Act 1983 before 
the Royal Commission presented its findings. What we heard about this is discussed below in 
chapter 5. 


Many people we heard from questioned how the individual was able to obtain a firearms 
licence, and there was a general feeling that there is room for improvement in the current 
checks and balances in place for firearms licence holders and owners. People familiar with 
the firearms licence application process had very strong views about the lack of robustness 
of the decision to grant the individual a firearms licence, believing that had vetting been 
correctly applied, the individual would not have been able to obtain a firearms licence. 
This view was largely based on factors that these people believed to be true, including: 


a) the individual’s travel to North Korea and the Turkish border with Syria (and his travel 
patterns more generally); 


b) that the individual’s firearms licence referees did not know him personally; and 


c) that none of the individual’s family members were included in background checks 
undertaken by New Zealand Police during the licensing process. 


Most of what we were told about firearms and firearms licensing in our community 
engagement processes came through our submissions process. Approximately three 
quarters of the submissions we received used a template that referred to the individual’s 
firearms licence application and whether he would have fulfilled the requirements of the fit 
and proper person test in the firearms licence applications process. While these particular 
submissions used this template, most included unique content on firearms licensing. 


One group submission noted other factors that they considered to be relevant (and believed 
to be true) and therefore should have come to light in the interview of the individual during 
the licensing process, for example, that: 


a) he had just arrived in New Zealand; 
b) he did not have any friends or relatives in Dunedin (or anywhere in New Zealand); and 


c) there was no indication he wanted the firearms for recreational purposes, as he joined 
a rifle club in February 2018, some six months after his arrival in New Zealand. 


The group who made this submission considered that factors such as these should have 
raised concerns about why the individual wanted to own firearms. 
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Many people told us of things that they believed to be true about the individual's referees 
used in his firearms licence application, including that: 


a) his referees did not meet New Zealand Police’s requirements; 


b) his two referees were related to each other and were therefore inappropriate referees; 
and 


c) his referees only knew the individual through an online forum, and had never met him 
in person. 


Some of these submissions about firearms licensing also discussed New Zealand Police’s 
administration of the process and outlined the relationship between New Zealand Police 
and the licensed firearms community. 


We heard that licensed firearms owners in New Zealand come from a range of different 
backgrounds. They have varied interests and reasons for owning firearms, with some 
having had a lifelong interest in firearms and some having only obtained their licences 
relatively recently. 


Firearms owners suggested that if the firearms vetting process had been stringently applied, 
the individual would not have been able to obtain a firearms licence. 


Many people shared their own experience of the firearms licensing process, particularly the 
New Zealand Police vetting process, comparing it to the vetting process they expected would 
have been applied to the individual. Many of these people felt, in their experience, that the 
vetting officer was invested in taking the time to do a thorough job and that the process was 
not just a “box-ticking exercise”. 


We also heard from a few people who thought that the firearms licensing process should 
be stricter, with some outlining their own experiences. One submitter observed people 
taking the test answering incorrectly and being encouraged to select a different answer. 
Another submitter felt that their vetting interview should have been more in-depth and 
“probing” than it was, believing their application form was almost “rubber stamped”. 


People who told us about how the licensing process had changed (either in their experience 
or according to what they had heard from others) considered that the process had become 
less rigorous and thorough following changes to the administration of the firearms licensing 
system. For example, one submission from a licensed firearms owner reflected on the 
changes that occurred between the time they applied for their licence and the renewal 
process they recently went through: 
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| initially applied for my licence at the end of 2009 and the application and interview 
process was quite an ordeal. The arms officer carrying out the interviews asked many 
questions and framed in different ways. ... A month ago | went through the renewal process 
and it was significantly different, my reference was interviewed over the phone and the 
questions for myself and next of kin didn’t allow for follow up questions for the arms officer 
to ask. 


Many submitters discussed the relationship between licensed firearms owners and 

New Zealand Police. Licensed firearms owners historically viewed the relationship with 
New Zealand Police positively but they felt it had deteriorated over time, and that it was 
no longer seen as a valuable relationship by New Zealand Police. For example, a firearms 
organisation expressed to us that “increasingly firearms user groups, rather than being 
seen as allies in the safe use of firearms, were instead treated as nuisances and their input 
and advice not sought nor listened to”. 


We were asked a number of questions about the firearms licensing process, which are 
answered to the extent possible in Part 5: The firearms licence. 


4-9 Solutions proposed to manage firearms and firearms licensing 


Where people suggested changes relating to firearms and firearms licensing, they were 
generally calling for strengthened processes and practices, as set out below. 


Many firearms owners called for more robust and consistent implementation of the firearms 
licensing process, possibly through establishing an independent authority. We were also 
told the firearms licensing vetting process should be strengthened through a threshold for 
the fit and proper person test. This should include psychometric assessment for extremist 
and racist beliefs, looking for signs of right-wing extremism or other extremist behaviour 
and an assessment of activity on social media. We were told the vetting process could also 
be further strengthened by replacing casual vetting staff with sworn New Zealand Police 
officers who had specialist training in psychological assessments (to apply the fit and proper 
test). People also suggested centralising and standardising processes across Districts anda 
periodic review of Districts. 


Other submitters wanted a review of all current licences issued in the last five years to ensure 
that correct process has been followed. Some felt the licences of individuals who come to 
the attention of New Zealand Police for racist beliefs and signs of extreme right-wing views, 
including on social media, should be revoked. 
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Other suggestions included: 
a) Automatic investigation of large, unusual, or frequent purchase orders. 


b) Scrutinising purchases by licence holders who have held firearms licences for less than 
one year. 


c) A review of large, unusual or frequent purchase orders in the last five years. 


d) Strengthening the regulatory regime for rifle clubs and ranges, including placing 
obligations on operators to report suspicious behaviour to New Zealand Police. 


4.10 The role of Public sector agencies in promoting and embracing 
diversity 


We heard that there is a widespread perception that some Public sector agencies’ 
understanding of New Zealand’s increasingly diverse population is at best superficial. Our 
Muslim Community Reference Group told us that diversity as a concept in the Public sector 
appears to be “only understood through a Pakeha lens” and that “as long as New Zealand 
sees ourselves as a predominantly ‘white’ / European society, we cannot embrace our 
diversity properly”. We were told that ethnic and religious communities (and especially 
Muslim communities) were often “othered” in the media and by Public sector agencies and 
by politicians perpetuating the idea of ethnic and religious communities belonging to a 
“different and separate” community at odds with national and global communities. 


We were told about examples of unconscious bias, racism and prejudice against different 
cultures and ethnicities by Public sector agencies or employees, and the need for the Public 
sector to take active steps to ensure their workplaces are truly inclusive and free from racism 
and discrimination. A liberal democracy is one that values diversity, but we were often told 
that this was not reflected by the New Zealand Public sector in its employment practices, 
policy advice and service delivery. 


Some people feel there are not enough Maori, Pasifika and people from ethnic and religious 
communities in Public sector agencies, especially at the chief executive level and second and 
third management tiers. We heard that Public sector engagement and diversity efforts often 
feel tokenistic, and that: 


It’s a great look for people to have a person of colour in the team. They get wheeled out 
for events. 
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We heard that Public sector agencies need to be more reflective of the diversity of 

New Zealand’s population. This includes becoming more culturally competent and 
multilingual, so that the Public sector can provide policies, programmes and services to 
the communities it serves in an effective and respectful way. We were told this will work 
better if Public sector agencies take a collaborative approach to partner and co-design 
initiatives with communities. 


Many people commented that changes in New Zealand’s demographics, education system, 
migration flows and expectations about equality of opportunity are all impacting on working 
opportunities, and these changes will continue over the next 20 years. They told us that now 
more than ever the future success of New Zealand will depend on the ability of employers, 
especially Public sector agencies, to optimise a diverse talent pool and take swift action to 
enable this to occur. 


Many people also discussed the perceived lack of a government strategy or ownership 
(through the existence of a dedicated agency, for example) to promote social cohesion and 
social inclusion. 


We heard that no Public sector agency was leading a public discussion on what social 
cohesion or social inclusion means for New Zealand now and into the future. We were told 

it was important that New Zealanders understand what social cohesion means for democracy 
and what everyone can do to embrace ethnic and religious communities and promote social 
cohesion. 


We were also told that “we measure what we value”. As New Zealand does not have any 
measures in place for social inclusion, social cohesion and diversity in the Public sector, this 
suggests that Public sector agencies currently see no value in these things. As a result we do 
not know our shortcomings and what activities might contribute to improving social inclusion 
and social cohesion in New Zealand. 


We heard from some people that the Office of Ethnic Communities should be a stand-alone 
government department to sit alongside Te Puni Kokiri and the Ministry for Pacific Peoples. 
The new government department would provide advice to ministers and Public sector 
agencies on all government policies and programmes with insights from ethnic and religious 
communities, and deliver key programmes. We were told that the current role of the Office of 
Ethnic Communities and its placement in the Department of Internal Affairs demonstrated it 
was not held in high regard by ministers, Public sector agencies or New Zealanders. We also 
heard that the Office of Ethnic Communities was ineffective within the Public sector and in 
working with communities. We were told that religious communities did not receive support 
from the Office. 
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We heard community frustration about the recent significant funding increase that 
Government provided to the Office of Ethnic Communities and not direct to communities 
themselves to assist them to deliver their own solutions. Some people felt that the 
Office of Ethnic Communities was an agency that had previously failed them and, in its 
rush to upskill, did not employ good recruitment practices. 


Many people asked questions relating to New Zealand’s increasingly diverse demographics 
and countering harmful behaviour. Our views on these matters can be found in 
Part 9: Social cohesion and embracing diversity. 


4.11 Solutions proposed to improve how Public sector agencies 
respond to New Zealand’s increasing diversity 


Our Muslim Community Reference Group and some submitters considered Public sector 
agencies must embrace diversity by: 


a) increasing recruitment from ethnic and religious communities, including for leadership 
positions; 


b) improving employment opportunities in the Public sector across New Zealand, including 
moving the Public sector from being primarily based in Wellington; 


c) valuing life experience alongside formal education when making recruitment decisions; 
and 


d) supporting staff who have skills and experience in working with ethnic and religious 
communities, and upskilling and providing training to further increase opportunities 
for people. 


Our Muslim Community Reference Group wanted to highlight that this is an attitude-based 
solution - it must not be seen as a box-ticking exercise, as has been the case in the past. 
They told us that government needs to recognise the value that diversity contributes to 
society, workplaces and communities in general. 


We were also told of the importance of diversity at all levels within Public sector agencies, 
including at the decision-making table. We heard that a critical part of implementing this 
solution will involve recognising what perspectives or life experiences are missing from 
consideration. A lack of diverse perspectives in policy setting and programme decisions 
affecting all New Zealanders means those decisions may be ineffectual or unintentionally 
cause harm. 
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4.12 Public sector agency engagement with communities 


We received many comments on community engagement. We were advised there is no 
commonly agreed definition of “community engagement” and the term is often used 
interchangeably with a number of other concepts, such as consultation, participation, 
consideration and empowerment. We were told that Public sector agencies do not 
understand nor put into operation effective community engagement. Our Muslim Community 
Reference Group saw the relationship between communities and Public sector agencies as 
critical to effective governance, policy development, and delivery of services. We heard from 
many people that community engagement by Public sector agencies is often tokenistic. 

They feel that decisions are made and the community is informed of the decision rather 

than being provided an opportunity to help identify issues and collaborate on developing 
solutions. We heard that Public sector engagement with communities is often characterised 
by not clearly defining the purpose of the engagement and that it is often not clear who is 
being engaged and why. 


We heard that insufficient diversity and cultural competency in Public sector agencies means 
that when they engage with communities, agency staff and community members can draw 
different conclusions about the outcomes. For example, a community member who raises 
concerns about threatening behaviour may not provide all relevant information or context. 
This is because they have assumed that the agency is aware of such information or context, 
an assumption that may be incorrect. 


We also heard that communities are often expected to volunteer their knowledge or take 
a day of leave from their employment to contribute to a Public sector agency engagement 
process. Many people consider that Public sector agencies need to sustainably resource 
communities to be involved in Public sector agency processes, and that there is some way 
to go in developing effective engagement practices with communities. 


Our Muslim Community Reference Group told us that: 


Departments often take community silence as acceptance! Offer engagement pathways 
that work not just for the organisation but also for the community. 


We also heard that when there is engagement, the relevant Public sector agency will often 
choose to “cherry-pick” and engage with a small group of people, sometimes on an ad hoc 
basis. Often this is from a few specific organisations or national organisations that may be 
perceived as representing the broader community of interest. We were told that engagement 
must be broad and inclusive, and not just with national organisations. Our Muslim 
Community Reference Group emphasised that engagement must not be tokenistic and must 
account for the diverse nature of Muslim communities. 
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105 We were told by many that Public sector agencies risk not getting a representative view by 
repeatedly returning to the same representatives to draw on their insights and knowledge. 
In addition, this places a burden on already stretched and sometimes overstretched 
community leaders and may also marginalise parts of communities that are not involved in 
the engagement process. 


106 We were told by many people that the government needed to resource, support and facilitate 
community-driven initiatives, rather than Public sector agencies imposing initiatives on 
communities. We also heard that Public sector agencies were sending unskilled employees 
to engage with communities on issues of importance. Under the guise of engagement, 

Public sector agencies were requiring busy community leaders and members to upskill Public 
sector employees who have no background and expertise working with Muslim communities 
and to do so without recompense. 


4.13 Solutions proposed to improve how Public sector agencies 
engage with communities 
1o7 In order to better represent the changing demographics of New Zealand, our Muslim 


Community Reference Group told us that Public sector agencies must improve how they 
engage with ethnic and religious communities about their safety and security needs. 


108 Improvements could include: 


a) meaningfully and respectfully engaging with a broad variety of people (including for 
example, women, youth, people with a range of national origins) and groups, rather 
than just one body or group; 


b) engaging with communities on their terms, and putting measures in place to ensure 
that communities understand the results of that engagement; 


c) increasing Public sector agencies’ resources so that they liaise more effectively with 
ethnic and religious communities; 


d) resourcing communities to enable them to effectively and efficiently engage with 
Public sector agencies; 


e) listening to communities’ needs and concerns about their safety and security with 
an open mind; 


f) empowering communities, including through providing advice and information, to 
make their own communities safer; and 


g) clearly reporting on engagement outcomes with communities regarding safety and 
security concerns. 
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109 We heard that Public sector agencies need to respect the expertise of communities rather 
than dismiss it. This includes recognising their expertise and compensating them for 
their time and expenses. Public sector agencies also need to ensure they do not place 
a burden on vulnerable communities by having to solve problems arising from exclusion 
and marginalisation. This means that Public sector agencies should not overburden those 
within the community they approach for advice nor expect vulnerable communities to be 
responsible for reducing the discrimination against them. 





4.14 Questions asked about what Public sector agencies knew 
about the individual 


vio Many people asked us questions relating to the individual. Often these were expressed 
in relation to what Public sector agencies knew about him, and a general disbelief that 
he had not come to the attention of any relevant Public sector agency before the 
15 March 2019 terrorist attack. 
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111 No one that we heard from through our community engagement processes, including in 
submissions, said they personally knew the individual who carried out the terrorist attack. 


v2 We were asked that the individual not be named, and that the terrorist attack only be 
referred to in terms of the 51 shuhada, to ensure the individual received no publicity or 
attention. The Muslim Community Reference Group noted the importance of ensuring 
that when the individual is referenced in our report, it is as “the ‘subject of interrogation’ 
rather than giving him light and space”. 


113. We were also asked by some to dismiss the individual’s reasoning and background, and not 
publicly share this information. 


114 Despite this, many people shared their views on the individual, in particular how he 
could have obtained a firearms licence. We also heard a number of rumours about the 
individual’s activities. We have set these out as we heard them in this chapter, and in 
Part 4: The terrorist we provide an accurate account of the individual’s activities. What 
we heard about the individual’s firearms licensing process is discussed in more detail in 
Part 5: The firearms licence. 


vis Many people questioned why the individual had not previously come to the attention of 
New Zealand and Australian agencies involved in the counter-terrorism effort. A few people 
raised a more specific question - why the individual was not identified by these agencies 
as a person of interest, given the fact that he had visited countries with travel advisory 
warnings. Many people questioned why he was not checked more thoroughly by 
Immigration New Zealand and New Zealand Customs Service on entering New Zealand. 
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People were uncertain about what information about the individual was known to 

Public sector agencies before 15 March 2019. Further, people questioned whether, if 

such information existed, it would have been taken into account by relevant Public sector 
agencies to scrutinise the individual’s entry into New Zealand or subsequent firearms licence 
application. Many people we met with or heard from felt that if the individual had not been 
of European descent, he would have come under much closer scrutiny by agencies involved 
in the counter-terrorism effort and the public. 


A few people queried whether there had been adequate information sharing between 
Australia and New Zealand when the individual entered New Zealand. For example, one 
submitter told us that: 


A fundamental point in the attack of 15 March is that the [individual] was an Australian 
citizen. As such, he was able to travel to and work in New Zealand freely. 


We heard from some people, including some affected whanau, survivors and witnesses, 

that they thought the individual must have had support to carry out the terrorist attack and 
do not consider he was a lone actor. They believe this was either through direct support 
(that more than one person was involved in the terrorist attack) or indirect support (such as 
through online communities). We also heard from members of Muslim communities that they 
thought the individual visited Masjid an-Nur, the Linwood Islamic Centre and masajid around 
the country before the terrorist attack. Many people we heard from could not comprehend 
how the individual was able to carry out the extent of activities that he did without being 
detected either by agencies involved in the counter-terrorism effort or by New Zealanders 
observing his behaviours. 


People we heard from thought that if Public sector agencies had monitored social media this 
may have alerted them to the potential threat and did not understand why the individual’s 
social media was not monitored. 


The people who spoke to us about the individual had specific questions they want answered 
by our report, including: 


a) Did he have direct or indirect support to carry out the terrorist attack? 


b) How could he afford to buy all the weapons and equipment needed to carry out the 
terrorist attack? 


c) How did he accumulate so much ammunition without drawing the attention of the 
counter-terrorism agencies? 


d) Given the fact he had visited countries with travel advisory warnings, why was he not 
checked more thoroughly by Immigration New Zealand on entering New Zealand? and 


e) How did he know the “perfect time” to enter Masjid an-Nur? 


These and other questions raised by communities about the individual and what Public 
sector agencies knew about him are answered to the extent possible in Part 4: The terrorist, 
Part 5: The firearms licence and Part 6: What Public sector agencies knew about the terrorist. 
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Chapter 5: What communities told us about 
“out of scope” matters 


We were provided with many people’s thoughts and views on matters that were outside the 
scope of our Terms of Reference. 


Although the Terms of Reference prevented us from making findings or recommendations 
on these issues, there was nothing preventing us from recording them as having been 
raised. These included concerns about the Terms of Reference, the identification process, 
changes to the Arms Act following the terrorist attack, New Zealand Police’s response to the 
terrorist attack and the individual’s interaction with the criminal justice system. 





5.1. Terms of Reference 


Many people had views about our Terms of Reference, generally in relation to the scope 
of our inquiry. 
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Many people felt our Terms of Reference were too narrow. Some felt this meant they could 
not comment on non-operational matters, such as Public sector agencies’ organisational 
culture and context. Some considered our Terms of Reference would not achieve proper 
scrutiny of Public sector agencies or an adequate explanation to the public about what 
happened. They did not allow for appropriate remedies. The list of named Public sector 
agencies was seen as too narrow, as it did not include the Department of the Prime Minister 
and Cabinet (the lead agency for the national security system) or other agencies involved 

in social cohesion work, such as the Department of Internal Affairs, the Ministry of Social 
Development and the Ministry of Education. 


We were also told that our Terms of Reference were not clear as to what we could inquire into 
and could be interpreted in a number of ways. 


Some also felt that there should have been wide engagement with affected whanau, survivors 
and witnesses, and Muslim communities more generally, on the Terms of Reference before 
they were finalised. We also heard that an appropriate expert representative from the 
Muslim community should have co-led the Royal Commission and that we should have 
enlisted other expertise, such as from Maori, to facilitate discussions and engagement with 
communities. 


5.2 Identification process 


Many affected whanau, survivors and witnesses we met with felt that the process for 
identifying their deceased or injured loved ones, particularly in hospital, caused them 
additional and unnecessary grief. Some people said they received conflicting and 
inconsistent information from New Zealand Police officers and hospital staff in the first 

24 hours after the terrorist attack. We were told that family members were asked to describe 
their loved ones over and over again by different New Zealand Police and hospital staff. 

In one case, a whanau member who had witnessed their loved one being killed was told by 
New Zealand Police and hospital staff not to lose hope, and that their loved one could be 
being treated in another hospital. This false hope caused considerable additional grief. 
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People we met with were frustrated about how long it took for their deceased loved ones to 
be moved from the scene and to be formally identified. In one case, a close whanau member 
read about the death of their loved one in a newspaper article rather than being informed by 
New Zealand Police. 


They questioned whether inexperience and lack of understanding about traditional Muslim 
naming conventions, and variations in how Muslim names are spelled, may have contributed 
to the delays in identification. This also led to confusion for whanau members who were 
trying to find their loved ones and understand what had happened to them. 


5.3 Changes to the Arms Act following the terrorist attack 


Most submissions we received on the changes to the Arms Act were highly critical of the 
reforms undertaken by the Government in 2019 and the then proposed changes, which 

were enacted in 2020. Comments included that it was a “knee-jerk reaction” penalising 
responsible licensed firearms owners, resulting in higher compliance costs and not impacting 
on criminals. 


Many who submitted on firearms matters felt the 2019 law change (banning most 
semi-automatic firearms) had the effect of blaming the 250,000 legal firearms owners for 
the actions of one person. Some felt distressed that they were no longer considered to be 
fit and proper to own some of their firearms. 


There were many comments on the speed of the 2019 law change. A number of submitters 
considered that it was undemocratic, allowing for little or no public consultation. 


Some people noted the illegal trade and importation of firearms was rife in New Zealand, and 
believed banning legally owned firearms would neither change this nor make the public safer. 


In relation to the 2019 and 2020 amendments to the Arms Act passed by the Government 
following the 15 March 2019 terrorist attack, we received many comments from submitters 
who did not support the legislative changes, in particular: 


a) querying the accuracy and usefulness of firearms registration; 


b) suggesting that the money spent on the buyback of firearms and new processes such as 
a firearms register could be better invested elsewhere; 


c) asserting that the ban on military style semi-automatics and assault rifles would prevent 
people from carrying out leisure activities such as competitive shooting; and 


d) asserting that people should have been allowed to retain these firearms with restrictions. 
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5.4 New Zealand Police response to the terrorist attack 


We heard from many people about the response to the terrorist attack. This was the most 
frequently raised topic in our meetings with affected whanau, survivors and witnesses. 


Many affected whanau, survivors and witnesses we met with expressed anger, grief, 
frustration and concern about how long it took for New Zealand Police to enter 

Masjid an-Nur and the Linwood Islamic Centre, and to allow emergency medical services 
through the cordons at the scenes. Nearly everyone we met with believed that more lives 
would have been saved if the injured had received medical treatment sooner. On the other 
hand, a few people were happy with the New Zealand Police response to the terrorist attack. 


Many people that we heard from were frustrated that New Zealand Police did not act 
quickly to protect other masajid and gathering places of Muslim communities both within 
Christchurch and across New Zealand. They believe that lives could have been saved at the 
Linwood Islamic Centre if New Zealand Police had deployed quickly to that location. 


Some affected whanau members were also frustrated that they were not permitted to go 
inside the New Zealand Police cordons at the scene to search for their loved ones. 


We were informed by some that they believe bystanders and victims were subjected to 
inappropriate, and even aggressive, conduct by New Zealand Police in attendance at the 
masjidain immediately following the terrorist attack. 


We were told at our 8 November 2020 hui with affected whanau, survivors and witnesses that 
they still have outstanding questions about the response of New Zealand Police and hospitals 
to the terrorist attack. 


Many affected whanau, survivors and witnesses advised that the former Police Commissioner, 
Mike Bush, had announced an independent review of the New Zealand Police response to 

the terrorist attack. Many affected whanau, survivors and witnesses felt frustrated that 

the results of the review had not been made public and it should have been by now. Some 
affected whanau, survivors and witnesses felt that their trust and confidence in New Zealand 
Police had further diminished as a result. Some affected whanau, survivors and witnesses 
were suspicious that the review had identified a number of faults that New Zealand Police 

did not want to be transparent about. 
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5.5 The individual’s interaction with the criminal justice system 


Some people we met with said New Zealand should have harsher sentences for terrorism. 
A few people suggested New Zealand should reintroduce the death penalty, with some 
claiming this would deter terrorist attacks in future. A few people also criticised the 
significant time it took to conclude the criminal process, noting the impact of the delay 
on the ability of affected whanau, survivors and witnesses to heal. 


Some people we heard from were concerned that the prison conditions in New Zealand were 
not harsh enough for the individual. Many expressed distress that the state would pay more 
each year (that is, $1.8 million per year)? to imprison the individual than to support those 
directly affected by the terrorist attack. 


A few people shared concerns and frustration that the individual was able to send 
correspondence to like-minded people while in prison. They questioned how this could 
have been allowed to occur and sought accountability from the Department of Corrections. 


> Kate MacNamara “Christchurch mosque shootings: [name of individual] prison bill to cost taxpayers $3.6m - Cabinet papers” 
New Zealand Herald (New Zealand, 4 August 2020). 
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Chapter 6: Concluding comments 


Our thinking throughout the inquiry has been informed by the wealth of information we 
received through our community engagement processes. We heard from a range of people, 
but many themes we heard were consistent. 





We heard that communities want to be part of Public sector and local government 
decision-making processes that affect them in order to create and realise their visions for 
the future. They want genuine engagement, with a strong wish to collaborate on policy, 
programmes and service delivery, particularly when it comes to addressing the safety and 
security of New Zealand and concerns that are directly relevant to them. An important 
element is Public sector agencies building long-term and meaningful relationships with 
communities, and informing communities of the results of their contributions and what, 
if any, change has occurred. 
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In addition to this, the value of community organisations and other non-government sectors 
being involved in decision-making on issues relating to their communities needs to be 
recognised by Public sector agencies. The expertise that can be offered by those whom the 
decisions will affect should be respected and valued. 


There is a lack of cultural and linguistic competence and a poor understanding of the 
implications of New Zealand’s increasingly diverse demographics in Public sector agencies. 
These barriers appear to hinder respectful and appropriate engagement with communities 
and affect agencies’ ability to understand what people’s concerns mean for those agencies. 
For the Public sector to effectively serve communities and respond to their concerns, it 
needs to equip and empower its workforce to better understand and reflect the diversity of 
New Zealand society. We acknowledge the work underway but encourage further action. 
In Part 9: Social cohesion and embracing diversity and Part 10: Recommendations we talk 
more about this. 


Despite the collective support New Zealand communities provided to those directly affected 
by the terrorist attack, the Public sector system of support has been found wanting by many. 
The 15 March 2019 terrorist attack demonstrated that Public sector systems of support 

need to have sufficient flexibility to adapt to a variety of different circumstances and the 
specific recovery needs of the affected communities. Affected communities need to be more 
actively engaged (in a culturally and linguistically appropriate manner) in the design and 
development of short, medium and longer-term Recovery plans to ensure their physical, 
medical, psychological, financial, cultural, emotional and other wellbeing needs will be met. 
Part 10: Recommendations discusses this further. 
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New Zealand is generally viewed in a positive light, but many personal experiences 
demonstrated to us that harmful, hateful and discriminatory behaviour remains 
commonplace. A loving, embracing side of New Zealand society was brought to the fore 
immediately after the terrorist attack, but also exposed has been less attractive parts of 
New Zealand society. 


A recurrent theme was that fostering a society in which New Zealand’s diverse demographic 
makeup is embraced, and harmful and hateful behaviours are not accepted, would minimise 
the need for legal intervention. More than this, embracing diversity has broader benefits 
and recognises the values that people from diverse backgrounds bring to a society. 
Embracing diversity will support diversity of thought, and may lead to existing societal 
norms being challenged. All New Zealanders have a role to play in bringing about societal 
change. Part 9: Social cohesion and embracing diversity and Part 10: Recommendations 
discuss this further. 
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Glossary 

Term Definition 

4Rs New Zealand’s integrated approach to national security 
includes four areas of activity known as the 4Rs - Reduction, 
Readiness, Response and Recovery. 

Da’ish The Arabic acronym for the Islamic State of Iraq and the Levant 
(ISIL), also known as the Islamic State of Iraq and Syria (ISIS). 
An Islamist extremist terrorist organisation. 

groupthink The practice of thinking or making decisions as a group driven 
by the urge to conform and valuing harmony over critical 
thinking or evaluation. 

hijab A head covering worn in public by some Muslim women. 

iwi Te reo Maori (Maori language) term that refers to a tribe - a 
large group of people bound together by descent from a 
common ancestor and associated with a distinct territory. 

Maori The indigenous population of New Zealand. 

Pasifika A collective term for people of Pacific Island descent. 





Public sector agency 


In general, an organisation that works for the government 
of New Zealand. 


In this report, “Public sector agencies” means the 217 
organisations listed in the appendix. 











Qur’an The central religious text of Islam. 

Recovery One of the 4Rs. Recovery activities are focused on bringing 
about the immediate, medium-term and long-term recovery of 
individuals and communities after a national security event. 

shuhada An Arabic term for the plural “martyr”. The term shuhada is 


used in this report to refer to people who died as martyrs as a 
result of the terrorist attack on 15 March 2019. 





Te Tiriti o Waitangi 


Te reo Maori (Maori language) name for the Treaty of Waitangi 
- New Zealand’s founding document signed by Maori and the 
the British Crown in 1840. 





whanau 


Te reo Maori (Maori language) term for family. 
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Chapter 1: Introduction 


Our Terms of Reference directed us to inquire into: 


3(a) the individual’s activities before the terrorist attack, including— 


(i) relevant information from his time in Australia; and 

(ii) his arrival and residence in New Zealand; and 

(iii) his travel within New Zealand, and internationally; and 

(iv) how he obtained a gun licence, weapons, and ammunition; and 


(v) his use of social media and other online media; and 





(vi) his connections with others, whether in New Zealand or internationally. 
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We address each of these issues in this Part, although we go into how the individual obtained 
a firearms licence in much greater detail in Part 5: The firearms licence. 


We interviewed family and associates of the individual, members of New Zealand Police and 
other officials. We examined, tested and analysed thousands of pages of evidence. Also, 
after the individual pleaded guilty to the charges against him and it was clear that there 
would be no trial, we interviewed him. 


When we interviewed the individual, his responses to some questions were limited and, 
on occasion, non-existent. We have distinct reservations about, and in some instances do 
not believe, aspects of what he told us. That said, much of what he said was credible, for 
instance his explanations of certain documents he created. More generally the interview 
provided insights into his activities and thinking, sometimes in ways he did not intend. 


It may be helpful at this stage to outline some points that provide a little context ahead of the 
detailed discussion about the individual that follows. 


The individual was born in October 1990 in Grafton, New South Wales in Australia, which is 
where he went to primary and secondary school. His mother is Sharon Tarrant and he has 
one older sister, Lauren Tarrant. His father, Rodney Tarrant, is deceased. 


His upbringing in Australia was marked by a number of stressors, including his parents’ 
separation and his mother’s subsequent relationship with an abusive partner. His father 
developed a form of cancer (mesothelioma) caused by exposure to asbestos and later 
died by suicide in April 2010. 


Before he died, Rodney Tarrant settled a claim for damages relating to his exposure to 
asbestos. With money that largely came from this settlement, he gave AU$457,000 to each 
of his two children. 
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The individual expressed racist ideas from an early age. He was also an avid internet user 
and online gamer. He had few childhood friends. 


After leaving school, the individual worked as a personal trainer at a local gym until 2012 
when he suffered an injury. He never again worked in paid employment. Instead, he lived 
off the money that he had received from his father and income from investments made 

with it. Although in his manifesto the individual claimed to have made money dealing in 
cryptocurrency, he told us that he generally used cryptocurrency only for transactions (that 
is, aS Currency). His banking records indicate only limited relevant transactions that total 
less than AU$6,000. We have seen no evidence that he made any significant profits through 
cryptocurrency. 


With the money from his father, the individual travelled extensively. First in 2013, he explored 
New Zealand and Australia and then between 2014 and 2017 he travelled extensively around 
the world. 


The individual has a close relationship with his sister Lauren Tarrant, and to a lesser extent 
with his mother Sharon Tarrant, but his relationships with others have been limited and 
superficial. He describes himself as an introvert. He told us that he had suffered from social 
anxiety since childhood and found socialising with others stressful. Without a job, he had 

no need to associate with people in workplaces and his frequent and usually solitary travel 
meant he did not form enduring relationships with others. This meant that his self-described 
introversion was not mitigated by the usual daily interactions that most people experience 

in their regular lives. Accordingly, there was limited opportunity for the hard edges of his 
political thinking to be softened by regular and lasting connections with people with different 
views. In fact, his limited personal engagement with others left considerable scope for 
influence from extreme right-wing material, which he found on the internet and in books. 


By January 2017, he was planning to move to New Zealand later that year and to take up 
shooting. We know this because in January that year he emailed the Bruce Rifle Club 
(which is near Dunedin) inquiring whether it was still operating. He indicated an intention 
to move to Dunedin in August that year. In February 2017 he booked flights to New Zealand 
to arrive in Auckland on 17 August 2017 and then on to Dunedin on 20 August 2017. We see 
these activities as the first manifestations of his terrorist intent. 
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We are satisfied that by January 2017 the individual had a terrorist attack in mind. We are 
also satisfied that when the individual came to live in New Zealand on 17 August 2017, it was 
with a fully-developed terrorist ideology based on his adoption of the Great Replacement 
theory and his associated beliefs that immigration, particularly by Muslim migrants, into 
Western countries is an existential threat to Western society and that the appropriate 
response (at least for him) was violence. 


As foreshadowed in his January 2017 emails to the Bruce Rifle Club, the individual moved to 
Dunedin, and on 1 September 2017 - just 15 days after arriving in New Zealand - he took the 
first step towards obtaining a firearms licence. From that time on, his primary focus in life 
was planning and preparing for his terrorist attack. 


The individual is capable of pursuing an idea or plan of action with considerable 
determination and with no assistance from others. Indeed, he can be single-minded to the 
point of obsession. This is evidenced by his ability to pursue fitness aims, the development 
and persistence of his racist and extreme right-wing patterns of thinking, his extensive travel 
and, most particularly, the preparation and planning for the terrorist attack he carried out 
on 15 March 2019. For the more than 18 months he lived in New Zealand preparing for the 
terrorist attack, he remained resolutely focused, attempting to maintain operational security 
from which there were only limited lapses. 


In this Part we explain the individual's trajectory from childhood in Australia through to the 
terrorist attack in New Zealand. In doing so, we draw on some of the concepts and ideas 
outlined in Part 2, chapter 5, on right-wing extremism. We have also tried to identify aspects 
of his behaviour, particularly those relevant to his terrorist ideology and preparation for the 
terrorist attack, which might have brought him to the attention of Public sector agencies, and 
specifically counter-terrorism agencies. This is something we deal with in various other Parts 
of this report but in this Part we discuss all the aspects of his conduct that are relevant to 
this phase of our inquiry. 
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Chapter 2: The individual’s upbringing 
in Australia 


Grafton, where the individual was born and brought up, is about 600 kilometres north 
of Sydney. Approximately 19,000 people live there, just under 10 percent of whom are 
Aboriginal or Torres Strait Islander Australians. 


The individual’s parents, Rodney and Sharon Tarrant, separated when he was young.’ 

After the terrorist attack, Sharon Tarrant told Australian Federal Police that her children 
were traumatised by the separation and other events, including the loss of their family home 
in a fire and the death of their grandfather. She also said that the individual’s personality 
changed after the separation, with him becoming clingy, anxious and not socialising well 
with others. The individual told us he suffered from social anxiety from childhood. 


Following their parents’ separation, the individual and Lauren Tarrant initially lived with their 
mother and later with their mother and her new partner. That relationship was violent, with 
the new partner assaulting Sharon Tarrant and the children. An apprehended violence order 
was taken out against his mother's partner to protect the individual. Lauren Tarrant, and 
later the individual, went to live with their father. 


Sharon Tarrant told the Australian Federal Police that the individual put on weight between 
the ages of 12 to 15. This led to bullying by other students at school. The individual had 
very few friends at school and, after he left school, he seems to have stayed in touch with 
only two of them, to whom we will refer as “school friend one” and “school friend two”. 

His contact with them was episodic. 


From the age of six or seven, the individual was interested in video games. He became 
particularly interested in massively multiplayer online role-playing games, other online 
role-playing games and first-person shooter games. As a child he had unsupervised access 
to the internet from a computer in his bedroom. He spent much of his free time at school 
accessing the internet on school computers. In 2017, he told his mother that he had started 
using the 4chan internet message board when he was 14 years old. 


The individual began expressing racist ideas from a young age, including at school and when 
referring to his mother’s then partner’s Aboriginal ancestry. He was twice dealt with by one 
of his high school teachers, who was also the Anti-Racism Contact Officer,” in respect of 
anti-Semitism. This teacher described the individual as disengaged in class to the point of 
quiet arrogance, but also well-read and knowledgeable, particularly on certain topics such 
as the Second World War. 





The year the parents separated, as provided by Sharon and Lauren Tarrant to Australian Federal Police, are not the same. 
Sharon Tarrant said she separated from Rodney Tarrant in 2000 (when the individual was aged nine or ten) and Lauren Tarrant 
said they separated when the individual was aged seven. 
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Under the New South Wales Department of Education Anti-Racism Policy, all schools are required to have a trained Anti-Racism 
Contact Officer and to implement strategies that lead to timely responses to both direct and indirect racism. The Anti-Racism 
Contact Officer assists parents, staff and students who have complaints regarding racism and facilitates the complaints handling 
process. 
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In 2006 or 2007, when the individual was 16 or 17, his father was diagnosed with pleural 
mesothelioma, a form of lung cancer caused by exposure to asbestos. After the diagnosis 
Rodney Tarrant became increasingly depressed and his children did not cope well. The 
individual began exercising compulsively at gyms and following a strict diet. He lost around 
52 kilograms in weight. 


As Rodney Tarrant’s health deteriorated he needed palliative care and in April 2010 he died 
by suicide at home. Information provided to Australian Federal Police after the terrorist 
attack indicated that the individual “discovered” his father’s body, having previously agreed 
with his father that he would do so. The individual was reluctant to engage with us on this 
issue. Given it was not particularly relevant to our inquiry, we did not push him once he gave 
an undetailed and not particularly convincing denial of involvement in his father’s suicide. 
What is relevant for our purposes is that the illness and death of his father caused the 
individual much stress. 
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Lauren Tarrant received counselling about her family situation, particularly the anger and 
abuse from Sharon Tarrant’s partner. As far as we know, the individual received limited 
counselling. This was through the palliative care system when his father was ill and shortly 
after he died. The individual told us that he had not sought treatment for his social anxiety. 


Prior to his death, Rodney Tarrant gave the individual and his sister around AU$80,000 each. 
Following his death, both children received more money from his estate, bringing the total 
to around AU$457,000 each. This was largely from the settlement of a claim for damages 
arising out of the exposure to asbestos, which had caused his mesothelioma. 


The individual continued to play video games regularly after his father’s death. He often 
played online with a group of people including school friend one and a New Zealander, 
whom he had met on the internet and to whom we refer as the individual’s “gaming friend”. 
During these games, the group would often chat online and the individual would openly 
express racist and far right views. 


Apart from gaming and spending time on the internet, the individual also maintained his 
interest in keeping fit. He joined the Big River Gym in Grafton at the end of his final high 
school year. Around mid-2009, he qualified as a personal trainer and worked at the gym, 
taking group classes and one-on-one personal training sessions. The owner and operator 
of the Big River Gym described the individual as a good personal trainer. During this time 
the individual trained by himself for two to three hours every day. 
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The individual told us that he began to think politically when he was about 12 and that 

his primary concerns have been about immigration, particularly by Muslim migrants into 
Western countries. In his manifesto he said that he had no complaints with ethnic 

people, if they remained in their places of birth. Those on the far right, particularly 
ethno-nationalists (as described in Part 2, chapter 5), sometimes assert similar views 
while disingenuously denying being racist. Aspects of the individual's life are consistent 
with his description of his views. When he was still working as a personal trainer in Grafton, 
he carried out community work in an Australian Aboriginal community. He told us that 

his relationships with members of this community were generally good and that he had 
admiration for some of its leaders. When travelling he engaged with people from many 
different ethnicities. When we interviewed him, he denied being racist. On the other hand 
he accepted in his manifesto that he was racist, a self-assessment that we accept. 


As the individual grew older, he told his sister that he thought he was autistic and possibly 
sociopathic. He also said that he did not care for people, including his own family, but knew 
that he should. His friendships with those outside his family were limited and we have seen 
no evidence that the individual was involved in sustained romantic or sexual relationships. 


The individual stopped working at the Big River Gym in 2012 after suffering an injury. 
It was at this point he decided to use the money he had inherited from his father to travel. 
He did not have any ties, connections or purpose in life that prevented him from travelling. 


The individual travelled to New Zealand for a holiday from 28 March 2013 to 29 May 2013.3 
School friend one accompanied him for the first part of the trip. When they arrived, 

they both stayed for around three days in Waikato with gaming friend and their parents. 
As mentioned above, the individual had come to know gaming friend online, but this was 
the first time gaming friend and the individual met each other in person. 


This was also the first time that gaming friend’s parent met the individual. Gaming friend’s 
parent said the individual did not talk in a way that was of concern and described him as 
“polite” and “nice”. Gaming friend and their parent are keen shooters and took the individual 
and school friend one to a shooting club twice and possum hunting. These were the 
individual’s first experiences using firearms. The visits of the individual, gaming friend and 
school friend one were recorded in the register of the shooting club. 


The individual spent approximately two weeks travelling around New Zealand in a campervan 
with school friend one and gaming friend. Gaming friend had not originally intended to go 
on the trip but decided to join them at the last minute to play peacemaker between the 
individual and school friend one who had been arguing with each other. 


3 This was the individual’s second time visiting New Zealand. The individual's first visit to New Zealand was as a child with his 
father and sister, arriving on 12 July 1999 and departing on 22 July 1999. 
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At the end of the two weeks, they spent one more night at gaming friend’s family home before 
school friend one returned to Australia and the individual visited other parts of New Zealand 
on his own. 


While travelling on his own, the individual visited Dunedin. We also know that he travelled 
through Whanganui, because he had a minor car accident there on 6 May 2013 when he 
pulled off the road onto the verge and his vehicle rolled forward down a bank. The individual 
was the only person in the car when he had the accident and there were no other vehicles 
involved. New Zealand Police attended the accident, but no enforcement action was taken. 
At the end of this trip he spent a few more nights with gaming friend and their family before 
returning to Australia. 


On the individual’s return from New Zealand he drove a van around Australia for about nine 
months between May 2013 and February 2014. During his travels, he visited Port Arthur in 
Tasmania. We discuss the possible relevance of this in Part 6: What Public sector agencies 
knew about the terrorist. 
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Chapter 3: World travel - 15 April 2014 to 


17 August 2017 


3.1. Where he travelled and what he did 


Between 15 April 2014 and 17 August 2017, the individual travelled extensively and always 
alone, except for his travel to North Korea as part of a tour group. The countries that we 
know the individual visited, or transited through, are set out in the table and world map 
below. This has been pieced together from a range of sources as part of our inquiry. 


Table 1: The individual’s international travel between 2014-2017 
































Country visited Arrived Departed 
Indonesia 15 April 2014 2 May 2014 
Singapore 2 May 2014 6 May 2014 
Malaysia 6 May 2014 22 May 2014 
Thailand 22 May 2014 28 June 2014 
Laos 28 June 2014 10 July 2014 
Cambodia 10 July 2014 22 July 2014 
Vietnam 22 July 2014 22 August 2014 
Hong Kong 22 August 2014 29 August 2014 
Macau 29 August 2014 30 August 2014 
Hong Kong 30 August 2014 3 September 2014 
China 3 September 2014 8 September 2014 





North Korea 


8 September 2014 


18 September 2014 





China 


18 September 2014 


17 October 2014 





South Korea 


17 October 2014 


13 November 2014 





Taiwan 


13 November 2014 


1 December 2014 





Malaysia (transit) 


1 December 2014 


1 December 2014 
































Myanmar 1 December 2014 29 December 2014 
China 29 December 2014 28 January 2015 
Philippines 28 January 2015 2 March 2015 
China 2 March 2015 31 March 2015 
Japan 31 March 2015 20 May 2015 
China 20 May 2015 18 June 2015 
Kyrgyzstan 18 June 2015 30 June 2015 
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Country visited Arrived Departed 
Armenia 30 June 2015 12 July 2015 
Georgia 12 July 2015 19 August 2015 
Ukraine 19 August 2015 8 September 2015 
Russia 8 September 2015 8 October 2015 





| Singapore (transit) 


8 October 2015 


8 October 2015 





China 


8 October 2015 


29 October 2015 
































Nepal 29 October 2015 21 November 2015 
India 21 November 2015 18 February 2016 
Iran Unknown 17 March 2016 
Turkey 17 March 2016 20 March 2016 
Greece 20 March 2016 18 April 2016 
Turkey (transit) 18 April 2016 18 April 2016 
Slovenia 18 April 2016 4 May 2016 
Hungary 4 May 2016 24 May 2016 
Slovakia 25 May 2016 6 June 2016 
Czech Republic 9 June 2016 17 June 2016 





United Arab Emirates 
(transit) 


18 June 2016 


18 June 2016 





Australia 


19 June 2016 


16 July 2016 





Indonesia 


16 July 2016 


12 September 2016 





Malaysia (transit) 


12 September 2016 


12 September 2016 











Turkey 13 September 2016 25 October 2016 
Israel 25 October 2016 4 November 2016 
Jordan 4 November 2016 10 November 2016 





United Arab Emirates 


10 November 2016 


15 November 2016 





Oman 


15 November 2016 


24 November 2016 





United Arab Emirates 
(transit) 


24 November 2016 


24 November 2016 





Ethiopia 


24 November 2016 


28 November 2016 








Egypt (transit) 





29 November 2016 





29 November 2016 
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Country visited 


Greece (transit) 


Arrived 


29 November 2016 


Departed 


29 November 2016 





Romania 


29 November 2016 


10 December 2016 





Greece (transit) 


10 December 2016 


10 December 2016 





Egypt 


10 December 2016 


21 December 2016 





Morocco 


21 December 2016 


24 December 2016 





Turkey (transit) 


24 December 2016 


24 December 2016 











Croatia 25 December 2016 28 December 2016 
Serbia 28 December 2016 30 December 2016 
Montenegro 30 December 2016 2 January 2017 





Bosnia and Herzegovina 


2 January 2017 


3 January 2017 












































Croatia 3 January 2017 31 January 2017 
Spain 31 January 2017 24 February 2017 
Portugal | 24 February 2017 14 March 2017 
Spain | 14 March 2017 30 March 2017 
France 4 April 2017 1 May 2017 
Ireland 1 May 2017 8 May 2017 
Scotland | 8 May 2017 10 May 2017 
Iceland 10 May 2017 20 May 2017 
Scotland (transit) | 20 May 2017 20 May 2017 
England (transit) 20 May 2017 20 May 2017 
Canada (transit) 20 May 2017 21 May 2017 
Peru (transit) 22 May 2017 22 May 2017 
Bolivia | 22 May 2017 2 June 2017 
Peru 2 June 2017 17 June 2017 





Canada (transit) 


17 June 2017 


17 June 2017 





England (transit) 


18 June 2017 


18 June 2017 





Scotland (transit) 


18 June 2017 


18 June 2017 





Kenya 


19 June 2017 


24 June 2017 





Tanzania 
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| 25 June 2017 





3 July 2017 












































Country visited Arrived Departed 
| Malawi (transit) 6 July 2017 6 July 2017 
Zambia 9 July 2017 11 July 2017 
Botswana 13 July 2017 14 July 2017 
Zimbabwe 14 July 2017 17 July 2017 
Botswana 17 July 2017 22 July 2017 
Namibia 23 July 2017 2 August 2017 
South Africa 2 August 2017 8 August 2017 
United Arab Emirates | 9 August 2017 9 August 2017 = 
(transit) g 
Australia | 10 August 2017 17 August 2017 a 





The individual continued to use the internet during his travels. He communicated with 
Sharon and Lauren Tarrant on Skype and Facebook Messenger and sporadically used 
Facebook Messenger to contact online friends, including gaming friend. He also posted 
photos of his travels on Facebook. We have no doubt that he visited right-wing internet 
forums, subscribed to right-wing channels on YouTube and read a great deal about 
immigration, far right political theories and historical struggles between Christianity and 
Islam. And, as we will explain, he also posted some right-wing and threatening comments. 


While extremist groups (including violent extremists) can be found in some of the countries 
the individual visited, there is no evidence that he met with them. Likewise, there is no 
evidence that he engaged in training or investigated potential targets. And although some 
of the sites he visited may have had resonance for him because of associations with past 
military action between Christianity and Islam, this is not the case with the vast majority 

of the destinations to which he travelled. 


The individual told his mother, sister, his sister’s partner and gaming friend that he had 

been mugged while in Africa and all of them saw this as having increased the intensity of his 
racism. The individual told us that this incident had happened in Ethiopia and that it had not 
significantly affected his thinking. Despite his denial to us, it is possible that this incident 
was of some moment in the development of his thinking. As will become apparent, however, 
we see other influences as far more significant. 
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Figure 7: The individual’s international travel 


i 


Trip 1 - 15 April 2014 to 17 August 2017 (see chapter 3 of this Part) 

Trip 2 - 16 January 2018 to 31 January 2018 (see chapter 4 of this Part) 
Trip 3 - 30 May 2018 to 5 June 2018 (see chapter 4 of this Part) 

Trip 4 - 17 October 2018 to 28 December 2018 (see chapter 4 of this Part) 
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3.2 The individual’s account of his mobilisation to violence 


According to his manifesto, the individual’s decision to engage in terrorism was largely a 
response to events that occurred and his own experiences in 2017, in particular: 


a) Daish-inspired terrorist attacks in Europe, particularly the Stockholm attack on 
7 April 2017 that killed five people, including eleven-year-old Ebba Akerlund (whose 
name the individual painted on one of the firearms used in the terrorist attack); 


b) the outcome of the 2017 presidential election in France, particularly Marine Le Pen’s 
loss on 7 May 2017;4 and 


c) the number of migrants he saw in French cities and towns during his visit between 
1 April 2017 and 1 May 2017. 


His account suggests that his terrorist attack: 


a) was retaliation for Islamist extremist terrorist events in Europe; 


b) followed his recognition of the inability of the far right to obtain a democratic mandate 
for addressing immigration; and 


c) was influenced by nostalgia for a pre-immigration past. 


Ideas of this sort are commonplace on the far right. We see his language as calculated to 
draw support, or at least sympathy, from those on the far right. 


The events and experiences to which the individual referred may have been significant to 
him. But as will become apparent we are satisfied that by the beginning of 2017 - that is 
before these events and experiences discussed above - he had already formed the intention 
of carrying out a terrorist attack. Indeed, we see this account of his mobilisation to violence 
as an exercise in propaganda and there is more on this in chapter 4 of this Part.® 


3.3 Our assessment of the timing of his mobilisation to violence 


We think the individual’s mobilisation to violence occurred earlier than the events to which 
he referred in his manifesto. Sharon Tarrant considers that the more the individual travelled 
the more racist he became. This sentiment was echoed by gaming friend. His sister recalls 
that when he returned to Australia for a month in June 2016, he was a changed person - he 
spoke regularly of politics, religion, culture, history and past wars, particularly those he had 
learned about during his travels. 





4 Marine Le Pen is the President of the National Rally political party (previously named the National Front). 


5 See the “Boiling the Frog” comment in chapter 4 of this Part. 
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After the terrorist attack, Sharon Tarrant told the Australian Federal Police that in early 2017, 
she felt the individual’s racism was becoming more extreme. She remembered him talking 
about how the Western world was coming to an end because Muslim migrants were coming 
back into Europe and would out-breed Europeans. She began to have concerns for his 
mental health. 


The narratives provided by the people we have just mentioned are supported by what we 
know of the individual’s internet activity, donations to right-wing organisations, first contact 
with the Bruce Rifle Club and the timing of his travel bookings to come to New Zealand. 


The individual was one of more than 120,000 followers of the United Patriots Front Facebook 
page. United Patriots Front was a far right group based in Australia. Between April 2016 and 
early 2017, the individual made approximately 30 comments on their Facebook page. At that 
time, the United Patriots Front was led by Blair Cottrell. Several of the posts made by the 
individual expressed support for Blair Cottrell. For example, when Donald Trump was elected 
President of the United States of America, the individual posted on Facebook “globalists and 
Marxists on suicide watch, patriots and nationalists triumphant - looking forward to Emperor 
Blair Cottrell coming soon”.® The individual also expressed support for Blair Cottrell on the 
True Blue Crew Facebook page. The True Blue Crew is another far right Australian group. 
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In one post to the United Patriots Front Facebook page, the individual threatened critics 

of Blair Cottrell by saying that “communists will get what communists get, | would love to 

be there holding one end of the rope when you get yours traitor”.” In August 2016, he sent 
comments via Facebook Messenger to an Australian critic of the United Patriots Front, 

which included “I hope one day you meet the rope.” ® This threat was allegedly reported to 
Australian police but no action was taken. We see references to “the rope” as alluding to the 
“Day of the Rope” which features in The Turner Diaries and, as explained in Part 2, chapter 5, 
is sometimes used by those on the extreme right to refer to a race war. 


Blair Cottrell told media he was aware of an AU$50 donation to the United Patriots Front 
made by the individual.2 We have been unable to verify this donation. 
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Alex Mann “Christchurch shooting accused Brenton Tarrant supports Australian far-right figure Blair Cottrell” ABC 
(Australia, 23 March 2019) www.abc.net.au. 


_ 


Alex Mann, footnote 6 above. 
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Graham Macklin “The Christchurch Attacks: Livestream Terror in the Viral Video Age” (2019) vol. 12 Combating Terrorism 
Centre at page 24. 
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Alex Mann, footnote 6 above. 
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The last time the individual was active on the United Patriots Facebook page was in January 
2017. Following Facebook’s removal of the United Patriots Front Facebook page in May 2017, 
several former members of that group created a new far right group, called The Lads Society, 
which had club houses in Sydney and Melbourne. Thomas Sewell (a New Zealander based 

in Victoria, Australia and a founding member of The Lads Society) contacted the individual 
online and invited him to join.'° However, the individual declined this offer, citing his 
upcoming move to New Zealand." He did, however, join a Facebook page created by 

The Lads Society and became an active member online. We will cover this in chapter 4 

of this Part. 


On 15 January 2017 and 17 January 2017, the individual made donations to right-wing 
organisations, Freedomain Radio (a podcast and YouTube channel created by Canadian 
Stefan Molyneux, who is prominent member of the far right) and the National Policy Institute 
(a white supremacist think tank and lobby group based in the United States of America). 


Table 2: The individual’s donations to right-wing organisations in early 2017 





| Transaction |Description as per bank Currency 
date statement 
15 January 2017 | PayPal: Freedomain Radio AUD $138.89 








17 January 2017.“ PayPal: National Policy Institute AUD $138.06 











On 21 January 2017, the individual emailed the Bruce Rifle Club enquiring whether the Club 
was still open. During the communications that followed, he said that he was “not in the 
area” but was looking to “move down that way sometime in August”. 





'° Patrick Begley “Threats from white extremist group that ‘tried to recruit Tarrant” The Sydney Morning Herald 
(Australia, 2 May 2019) www.smh.com.au. 


" Patrick Begley, footnote 10 above. 
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Date: 21 January 2017 
From: [The individual] 
To: Bruce Rifle Club 


Hey there, just wondering if the Bruce Rifle Club is still 
operating? And if so are they accepting new members? 


Date: 21 January 2017 
From: Bruce Rifle Club 
To: [The individual] 





Yep still going. 
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Date: 21 January 2017 
From: [The individual] 
To: Bruce Rifle Club 


That’s great news. I’m actually not in the area, just looking 
to move down that way sometime in August and was 
hoping there was a Rifle club | could join, happy to see you 
guys are still running. Hopefully will drop in sometime in 
August ... 





When we asked the individual about this, he told us that he had developed an interest in 
firearms, and it was this interest that had prompted him to make contact with the Bruce Rifle 
Club. We do not accept his explanation. At this point, the individual’s only experiences with 
firearms had been during his 2013 visit to New Zealand and, as he told us, at two overseas 
tourist attractions while travelling. As his actions after he arrived in Dunedin show, his only 
interest in firearms was to develop proficiency in their use to carry out a terrorist attack. 


In February 2017, the individual booked flights to arrive in Auckland on 17 August 2017 and to 
fly from Auckland to Dunedin on 20 August 2017. 
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3.4 Evaluation of the significance of the individual’s travel 


The longest visit the individual made to any one country was to India where he stayed 
between 21 November 2015 and 18 February 2016. The countries that he visited for periods 
of about a month or more were: 


a) 
b) 


c) 


d) 
e) 
f) 
8) 
h) 
i) 


Thailand (22 May 2014-28 June 2014); 
Vietnam (22 July 2014-22 August 2014); 


China (3 September 2014-8 September 2014; 18 September 2014-17 October 2014; 
29 December 2014-28 January 2015; 2 March 2015-31 March 2015; 20 May 2015-18 June 
2015; and 8 October 2015-29 October 2015); 


South Korea (17 October 2014-13 November 2014); 
Myanmar (1 December 2014-29 December 2014); 
the Philippines (28 January 2015-2 March 2015); 
Japan (31 March 2015-2 May 2015); 

Georgia (12 July 2015-19 August 2015); and 


Russia (8 September 2015-8 October 2015). 


Of the countries that made up the former Yugoslavia, he visited: 


a) 
b) 
c) 
d) 
e) 


Slovenia (18 April 2016-4 May 2016); 

Croatia (25 December-28 December 2016 and 3-31 January 2017); 
Serbia (28-30 December 2016); 

Montenegro (30 December 2016-2 January 2017); and 


Bosnia and Herzegovina (2 January-3 January 2017). 


The individual was thus in Croatia, Serbia, Montenegro and Bosnia and Herzegovina between 
25 December 2016 to 31 January 2017. It was during this time that he wrote to the 
Bruce Rifle Club, which we see as the first tangible indications of his mobilisation to violence. 
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The individual’s presence from late December 2016 to late January 2017 in the areas in which 
wars associated with the breakup of the former Yugoslavia had taken place may have been 
related to his decision to write to the Bruce Rifle Club in January 2017. But, as we have 
noted, there is no evidence of the individual engaging in training in his travels. Given the 
limited periods of time he stayed in the countries he visited, there would not have been 
much opportunity to do so. This is particularly so given the individual travelled between 
cities and towns in each of the countries. Nor is there evidence of the individual meeting 

up with right-wing extremists. As well, most of the countries in which the individual spent 
substantial periods of time have no association with right-wing extremism. 





In the aftermath of the terrorist attack of 15 March 2019, the New Zealand Security 
Intelligence Service received a substantial number of reports from international partners 

in relation to the individual, which we have reviewed. On the basis of the material that we 
have seen, it is likely that the individual occasionally shared some of his political views and 
interests with those he met during this travels. It is also at least possible that he visited 
some places because of their association with historical events in which he was interested. 
But more significantly, based on the information we have seen, there is no suggestion that the 
individual received training or met with known right-wing extremists. 
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Against this background, we see the primary significance of the individual's travel as being 
that it provided the setting in which his mobilisation to violence occurred rather than its 
cause. It may be that the individual’s experiences while travelling had some role to play in 

his mobilisation to violence. But of far more materiality was his immersion during this period 
in the literature, and probably the online forums, of the far right and the social isolation of his 
solo travel. And, as will be apparent, we do not accept the individual’s account of when and 
why he decided to engage in terrorism - an account that we see as propaganda. 


We see the individual's travel between 2014 and 2017 as largely a function of his 
circumstances and personality. He had the money to travel and no employment, personal 
relationships or other purpose in life that precluded it. The purpose of the travel was not 
to meet up with extreme right-wing people or groups or engage in training activities or 
reconnaissance of possible targets. Put simply, he travelled widely because he could and 
had nothing better to do. 
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Chapter 4: General life in New Zealand 


4.1 Overview 


We are satisfied that by the time the individual arrived in New Zealand in August 2017 he 
intended to commit a terrorist attack. This was the primary focus of his life in New Zealand. 
It involved, amongst other things, equipping himself with weapons, developing firearms 
expertise, bulking up at a gym, identifying targets and planning. 


In the next chapter we discuss in detail his preparation and planning. In this chapter we 
seek to provide context for what is to come, discussing those of his activities that were not 
focused on preparations for a terrorist attack. We address his arrival in New Zealand and 
taking up residence in Dunedin, his finances, associations with others, international travel 
from New Zealand, internet activity and donations to overseas right-wing organisations and 
individuals. 


4.2 Arrival in New Zealand and taking up residence in Dunedin 


The individual flew into New Zealand on 17 August 2017. As an Australian citizen, he was 
eligible for, and was granted, a resident visa on arrival in New Zealand. This is discussed in 
more detail in Part 8, chapter 8. 


On arrival at Auckland International Airport, the individual was picked up by gaming friend 
and their parent. They drove him to their home in Waikato where he stayed for three nights 
before flying to Dunedin on 20 August 2017. Gaming friend said that, during this visit, they 
took the individual to the same shooting club that they visited in 2013. There is no record 

of the individual attending the shooting club in August 2017. However, gaming friend and 
their parent are recorded as attending the shooting club on 18 and 19 August 2017. Given the 
individual was staying with gaming friend and their parent during this time, and the evidence 
of gaming friend, we think it is likely that the individual attended the shooting club in August 
2017. 


The individual told friends and family that he chose to live in Dunedin because of its climate, 
Scottish heritage and low levels of immigration. He told us that he was also interested in 
the architecture. He rented a flat at 112 Somerville Street, Dunedin and started living there 
on 24 August 2017. Except for three trips overseas, he lived there until 15 March 2019. 


The Somerville Street flat was very bare. There was a main bedroom, a second bedroom with 


a computer, desk and chair and a lounge with only a bed to sit on. 


4.3 Finances 


When the individual arrived in New Zealand, he had several bank accounts with the 
Commonwealth Bank of Australia. These accounts held a large proportion of the individual's 
funds. 
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After arriving in New Zealand, the individual opened two bank accounts with ANZ Bank 
(Australian and New Zealand Banking Group) on 23 August 2017 and obtained a debit card. 
He primarily used one of his accounts with the Commonwealth Bank of Australia and one of 
his ANZ Bank accounts to pay for expenses in New Zealand. When paying for expenses using 
his ANZ Bank account, the individual would transfer money from his Commonwealth Bank 

of Australia accounts into his ANZ Bank account. The total amount credited to his ANZ Bank 
account between 23 August 2017 and 15 March 2019 was $57,018.03. These transfers were 
not likely to, and did not, give rise to any suspicious transaction reporting by ANZ Bank. 


In addition, the individual and Lauren Tarrant had purchased a rental property on 

13 January 2017 in New South Wales. The individual received payments from Lauren Tarrant 
between March 2017 and March 2019, which represented his share of the rent from the jointly 
owned property. 
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Throughout the time he lived in Dunedin, the individual's living expenses and preparation 
for the terrorist attack were entirely funded from the money he received from his father and 
income from investments made with that money, including the rental property. We provide 
more detail on this later in this Part. 


The individual gave no concrete indication to anyone of what he would do when the money 
ran out beyond indicating to his sister that he might kill himself and later telling family 
members and gaming friend that he would go to the Ukraine to live. We have seen no 
indication that the individual gave serious thought to working for a living. 


As will become apparent from the individual’s planning documents, his dwindling financial 
reserves influenced the timing of his terrorist attack. 


4.4 Associations with others 


The individual’s social interactions in Dunedin were limited. He had only routine dealings 
with his landlord and property manager and little contact with neighbours. His interactions 
with people he met at shooting clubs and the gym were superficial. There were also one-off 
transactional exchanges with people when buying and selling items online. 


His association with gaming friend continued. Gaming friend described to us their friendship 
with the individual as being “mainly online friends” and referred to him as “just a friend”, 

not a good friend. They would be in touch through online gaming up to three times a week 
but there were lengthy periods of time (of up to seven or eight months) when there was no 
contact at all. As noted, the individual stayed with gaming friend and their family for three 
nights when he first arrived in New Zealand in August 2017 and, as well, in January 2018, the 
individual and gaming friend travelled to Japan together for two weeks. This was the full 
extent of their face-to-face engagement during this period. 
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The individual remained in touch, to a limited extent, with school friend one. In their 
statement to the Australian Federal Police, school friend one said that from late 2017 
onwards they did not hear from the individual for long periods of time. 


School friend two was living in Japan in early 2018 and, as we will explain, the individual 
met up with them there in January 2018. This was the last time they met, despite 
school friend two moving to Queenstown, New Zealand later in 2018. It takes less than 
four hours to drive from Dunedin to Queenstown but neither took the time to meet up. 


The individual remained in contact with his mother and sister. He visited them in Australia 
and his mother visited him in Dunedin. Her visit warrants brief discussion. By the time of her 
visit (late December 2018 and early January 2019) the individual was starting to finalise his 
plan to carry out a terrorist attack and he was fixated on what lay ahead. 


On 24 December 2018, Sharon Tarrant and her current partner, who is of Indian ethnicity, flew 
to New Zealand for a holiday in the North Island. They changed their travel plans so that they 
could see the individual in Dunedin from 31 December 2018 to 3 January 2019. During their 
visit, the individual took his mother and her partner sightseeing in and around Dunedin and 
to Milford Sound, Te Anau and Invercargill. He also took them to the Otago Shooting Sports 
Rifle and Pistol Club (which we discuss in more detail below), but they could not access the 
range as the individual was unable to unlock the gate. 


Interactions between the individual and Sharon Tarrant and her partner were awkward and 
at times tense. Illustrative of this is an incident on 2 January 2019, when Sharon Tarrant and 
her partner took the individual out for breakfast. They went into one café, but soon left after 
the individual refused to spend money in “migrant cafés”. He told his mother he wanted 

his money going to “white New Zealanders”. They all had to find somewhere else to eat. 
Afterwards, they drove back to the individual's flat in silence. 


The individual told his mother he would not renew the lease on his flat and wanted to sell his 
belongings and move to the Ukraine. That was the last time Sharon Tarrant and her partner 
saw the individual before the terrorist attack. 


Sharon Tarrant later told Australian Federal Police that when she left New Zealand, she felt 
“petrified” about the individual’s mental health and increasingly racist views. She felt he 

had no friends and had isolated himself in a small, empty flat. She said that she was so 
worried that the night she left the individual, she searched online for information about 
white supremacy groups in Ukraine. She said that she emailed the individual an article about 
extreme right-wing groups in Ukraine that groomed young men like him and pleaded for him 
to come home to Australia. He never responded. 
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4.5 International travel from New Zealand 


Between 16 January 2018 and 15 March 2019, the individual left New Zealand three times to 
travel overseas. These three trips are detailed in the table below and also shown on a world 


map in chapter 3 of this Part. 


Table 3: The individual’s international travel from New Zealand 2018-2019 


Country visited 


Trip 1 


Arrived 


Departed 





Hong Kong (transit) 


16 January 2018 


16 January 2018 





Japan 


17 January 2018 


30 January 2018 





Hong Kong (transit) 


30 January 2018 


31 January 2018 





Trip 2 





Australia 


30 May 2018 


5 June 2018 





Trip 3 





Australia (transit) 


17 October 2018 


17 October 2018 





United Arab Emirates 
(transit) 


18 October 2018 


18 October 2018 





India (transit) 


18 October 2018 


18 October 2018 





Pakistan 


18 October 2018 


8 November 2018 





United Arab Emirates 
(transit) 


8 November 2018 


9 November 2018 





Austria (transit) 


9 November 2018 


9 November 2018 





Bulgaria 


9 November 2018 


15 November 2018 





Romania 


15 November 2018 


26 November 2018 





Hungary (transit) 


26 November 2018 


26 November 2018 

















Austria 26 November 2018 4 December 2018 
Estonia 4 December 2018 5 December 2018 
Latvia 5 December 2018 8 December 2018 
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| Country visited Arrived Departed 














"Estonia | 8 December 2018 10 December 2018 

| Lithuania 11 December 2018 | 13 December 2018 

| Poland 13 December 2018 | 22 December 2018 
United Arab Emirates 22 December 2018 23 December 2018 
(transit) 

| Australia 23 December 2018 | 28 December 2018 








The individual's trip to Japan in January 2018 was with gaming friend. According to gaming 
friend, this holiday involved ordinary tourist activities, such as sightseeing. One night they 
went out drinking with school friend two, who was working in Tokyo at the time. 


The individual’s trip home to Australia in May 2018 was for his sister’s 30th birthday. The 
individual’s mother described him as being very tense during this visit and unable to relax 
at the family gathering. 


The third trip was between 17 October 2018 and 28 December 2018. The individual spent 
the last five days of this trip in Australia. During this time, the individual told his sister and 
her partner that he wanted to move to Ukraine as he thought it would be cheaper to live 
there and Dunedin was too multicultural. He also met school friend one at a local gym for 
a workout. School friend one described this meeting as unremarkable. 


There is one curious feature of the third trip, which we discuss in chapter 6 of this Part. 
Aside from this feature, the international trips taken from New Zealand between January 
2018 and December 2018 are not particularly material to our inquiry. 


4.6 Internet activity 


Attempts to minimise digital footprint 


The individual took a number of steps intended to minimise his digital footprint so as to 
reduce the chances of relevant Public sector agencies, following the terrorist attack, being 
able to obtain a full understanding of his internet activity. For example, the individual 
removed the hard drive from his computer and this has not been located. He also tried to 
delete emails. 
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Facebook 


Although he became a Facebook member in 2013, the individual’s history on Facebook is 
erratic. From time to time he deleted data and removed Facebook friends. And for six 
months in 2018 he did not post at all. 


The individual’s use of his own Facebook page was intermittent, but he occasionally used it to 
post far right material. Gaming friend also said that the individual had a number of Facebook 
accounts over the last few years, randomly closing one down and creating a new one. In one 
Facebook conversation with three Facebook friends, he included a link to an 8chan board, 
but the link cannot be recreated. 


In 2017, the individual joined The Lads Society’s Facebook group, having changed his 
username to “Barry Harry Tarry”. Later, he joined The Lads Society Season Two Facebook 
page, which was a private group. He made his first post on 19 September 2017. He was an 
active contributor, posting on topics related to issues occurring in Europe, New Zealand and 
his own life, far right memes, media articles, YouTube links (many of which have since been 
removed for breaching YouTube’s content agreements) and posts about people who were 
either for or against his views. He also encouraged others to donate to Martin Sellner, a far 
right Austrian politician. Two sets of comments warrant particular mention. 


In early February 2018, the individual (under the Barry Harry Tarry username) engaged in 
online discussion with members of The Lads Society Season Two Facebook group about Mein 
Kampf.” In particular, they discussed Hitler’s suggestion that grievance should be the focus 
of propaganda, “galvanising” those who see themselves as persecuted and “drawing in new 
sympathisers”. The individual commented: 


Agreed, it is far better to be the oppressed than the 
oppressor, the defender than the attacker and the political 
victim rather than the political attacker. Though 1920's 
Germany was a very different time to now and we face 

a very different enemy. Our greatest threat is the 
non-violent, high fertility, high social cohesion immigrants. 
They will boil the frogs slowly and by the time our people 
have enough galvanising force to commit the political and 
social change necessary for survival, the demographics in 
my opinion will have shifted so harshly that we would likely 
never recover. 





Mein Kampf was written by Nazi Party leader Adolf Hitler in 1925. 
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What | am saying is that we can’t be a violent group, not 
now. But without violence | am not certain if there will be 
any victory possible at all. 


“Boil the frogs” is a metaphor, the premise of which is that if a frog is put into boiling water 
it will jump out, but if placed into tepid water that is then brought to the boil slowly, it will 
not perceive the danger or change in circumstances, despite being boiled alive. For other 
members of The Lads Society Season Two, it would have been clear that the individual was 
referring to Muslim migrants when speaking of immigrants and what he said aligns with his 
manifesto, The Great Replacement. The assertion that “we can’t be a violent group” was 
made around the same time as the first of the planning documents discussed in the next 
chapter was created, a document that evidences a clear intention to carry out a terrorist 
attack. 


As we Set out in Part 2, chapter 5, those who subscribe to extreme right-wing ideologies 
often “tone down” their language to avoid endorsing violence but, at the same time, use 
divisive rhetoric towards different ethnic or religious groups. We see the language used by 
the individual in the posts as consistent with that used by those on the extreme right-wing. 

In addition, ethno-nationalists often implicitly support violence within closed groups. Having 
identified the apparent problem of Muslim immigration rates, but offering no democratic 
solution, we consider the post by the individual was an implied call to violence and, in this 
way, another illustration of his ethno-nationalist beliefs. 


On 12 February 2018, the individual, still using the Barry Harry Tarry username, made several 
posts to The Lads Society Season Two Facebook page. Some we do not reproduce here, 
because they contain references to particular individuals and publishing them would give rise 
to privacy and safety concerns that cannot be practically mitigated by redaction. The drift of 
what he had to say however, emerges clearly enough from the comments that follow: 


Across the road from my gym is an Islamic boarding school. 
It’s name is ... To date | have just been using it as a source 
of rage for my lifts. Today | found out that this Islamic 
boarding school that sits in my area was once [a catholic] 
school. This is what happens as a society when you fail to 
have children then import the children of others to replace 
them. 
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Otago Muslim Association [official] was both surprised and 
delighted by the announcement. “I’m very, very pleased. It 
will be a great asset for the Muslim community in Dunedin, 
as well as New Zealand.” What in the fifty fires of fuck have 
| stumbled upon here? A ... muslim bankrolling an Islamic 
learning school in New Zealand? This dude is No.1 on the 
prank list. 





“a non-profit school under charitable status” ... This is 
getting backed by tax payers money for sure. Absolutely 
sickening 
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Another bankroller was University of Otago [staff member] 
and member of the Dunedin Muslim community. ... . The 
local university students are being taught ... by a devout 
Muslim ... . Jesus fucking christ. 


Then, after comments from others about Muslim schools: 


Though | must say, it is far better to have separate schools 
and it ensures they are always seen as outsiders, and 
there is no intermixing of cultures or races. Them having 
seperate schools is something we should support. Plus it 
makes them all gather in one place....JK JK JK 


In this context, “UK” stands for “just kidding” but is often used ironically (that is by someone 
who in fact is not “just kidding”). In this instance, the individual was not “just kidding”. 

We know this because he had already completed a planning document that envisaged 

mass murder, as we discuss below. 


When we put these comments to the individual, he acknowledged that the expression, “No. 1 
on the prank list” could be seen as a threat of harm. We note that the 15 March 2019 terrorist 
attack is sometimes referred to on far right forums as “the mosque prank”. Consistently with 
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what seemed to be a general reluctance on his part to acknowledge lapses of operational 
security, the individual did not accept that his comments would have been of concern to 
counter-terrorism agencies. He thought this because of the very large number of similar 
comments that can be found on the internet. Later in the interview, however, he said that 
these were the worst of the comments he had posted. We return to discuss this issue in 
Part 7: Detecting a potential terrorist. 


On 9 April 2018, the individual left The Lads Society Season Two Facebook group. Six days 
later he deleted 134 Facebook friends, including those made through The Lads Society, such 
as Thomas Sewell. For the next six months the individual did not use his Facebook account. 
When he did return to Facebook it was in a careful and measured manner. He denied to us 
that his April 2018 departure from the group may have been as a result of concerns about the 
February 2018 comments, claiming that it was instead due to his social anxiety. 


He used Facebook Messenger to keep in touch with his family and Facebook friends, and later 
on as a method of contacting people to whom he had sold goods online. 


He reprimanded his mother for using the term “neo-Nazi” in Facebook Messenger when 

she commented on his shaved hair and rhetoric. His mother understood that he was not 
offended at being called a “neo-Nazi”, but rather was worried that her use of the term ona 
popular messaging platform would be detected. Similarly, in a conversation with his sister 
on Facebook, the individual expressed concerns about the Australian Security Intelligence 
Organisation tracking him and asked her to change names on banking details to anonymise 
transactions relating to him. When we interviewed him, he said that there was an element 
of play-acting in all of this and that it is common for those on the far right to pretend to 
believe that they are under surveillance. This explanation exemplifies the problem identified 
in Part 2, chapter 5 - that is, the difficulty in distinguishing between what is ironic and what 
is meant literally. We are inclined to see these incidents as evidence of his genuine concern 
about operational security. 


Other internet activity 


In a gaming site chat room that gaming friend participated in, the individual posted 
numerous links to Reddit posts, Wikipedia pages and YouTube videos. According to 
gaming friend these posts were far right in nature. The links have since been deleted. 


On 17 October 2017, the individual set up a Trade Me account, which he used to purchase 
and sell items, including some of his firearms magazines and some firearms equipment 
(such as gun slings). The only point of interest in relation to his use of this account is his 
username “Kiwi14words”. This is a reference to a white supremacist 14-word slogan, “We 
must secure the existence of our people and a future for white children”. This username did 
not apparently attract attention. 
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The individual contributed to the NZ Hunting and Shooting online forum. Most of the posts 
he made related to the sale of firearms and firearms equipment. Although his exchanges with 
others on this forum were at times testy, they are not material to our inquiry. 


The individual used the internet to buy far right books, ebooks, publications and accessories 
to send to his family, such as a “black sun” patch and a Celtic knot necklace with symbols 
used by white supremacist groups. The books purchased were Fascism: 100 Questions Asked 
and Answered by Oswald Mosley, The Decline of the West by Oswald Spengler and A Short 
History of Decay by EM Cioran. These books were delivered to Lauren Tarrant for her partner 
(the first listed book) and Sharon Tarrant (the second and third books), possibly to introduce 
them to his beliefs. Right-wing publications were also delivered to Lauren Tarrant’s house in 
the two years preceding the terrorist attack. 





A copy of the manifesto written by the Oslo terrorist, a list of the individual’s accounts and 
passwords and deleted firearms videos that had been downloaded from the internet were on 
the SD card from the individual’s drone. As we will shortly explain, the individual used this 
drone to fly over Masjid an-Nur for reconnaissance. We will discuss the possible significance 
of the firearms videos in Part 6: What Public sector agencies knew about the terrorist. 
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The individual told us that he had accessed the dark web to make purchases. We know 
that he had used Virtual Private Networks (VPNs) when travelling and he told us that he was 
familiar with Tor browsers and was thus capable of interacting on the internet in ways that 
would make him difficult to trace. He was also familiar with how to encrypt emails. 


The individual claimed that he was not a frequent commenter on extreme right-wing sites 
and that YouTube was, for him, a far more significant source of information and inspiration. 
Although he did frequent extreme right-wing discussion boards such as those on 4chan and 
8chan, the evidence we have seen is indicative of more substantial use of YouTube and is 
therefore consistent with what he told us. 
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4.7. Donations to overseas right-wing organisations and individuals 


While living in New Zealand, the individual made at least another 14 donations to far right, 
anti-immigration groups and individuals. Some of these donations were made directly 
from the individual’s Australian bank account through PayPal and totalled AU$6,305.78. We 
are also aware of five donations made by the individual using Bitcoin. The largest Bitcoin 
donation was made on 14 January 2018 and was the equivalent of US$1,377. We have 
provided a full list of the donations in the table below. 


Table 4: The individual’s donations to overseas right-wing organisations and individuals 


while in New Zealand 





Amount 






























































Transaction date _ | Description as per bank statement | Currency 

15 September 2017. GENERATION IDENT AUD | $187.18 

15 September 2017. TRS RADIO AUD $131.02 

15 September 2017 PayPal: Rebel News Network Ltd AUD $106.68 

15 September 2017. PayPal: SmashCM AUD $177.43 

16 September 2017. IMT FR7610278073010002130350147 AUD $1,591.09 
GENERATIREFC259706626154 EUR 

19 September 2017. GENERATION IDENT AUD $187.36 

20 September 2017. IMT FR13907000006276168621321 AUD $1,590.08 
GENERATIREFC263707054998EUR 

22 December 2017. BACK THE RIGHT AUD $25.97 

5 January 2018 MARTIN SELLNER MITU AUD $2,308.97 

14 January 2018 Daily Stormer Bitcoin 0.100 

12 February 2018 Daily Stormer Bitcoin 0.00865585 

12 February 2018 Daily Stormer Bitcoin 0.03 

20 April 2018 Identity Movement - Germany Bitcoin 0.00121292 

20 April 2018 Identity Movement - Germany Bitcoin 0.00529139 








As will be apparent, there were multiple donations to the French branch of Generation 
Identity - Génération Identitaire (see Part 2, chapter 5), a European far right movement, 
and also a donation directly to Identitarian Movement Austria’s leader, Martin Sellner.”8 





3 Génération Identitaire refunded the individual AU$1,340.19 on 20 September 2017. Génération Identitaire did not provide 
financial support to the individual as this was a repayment of the 16 September 2017 donation. The individual then made a 


second donation on 20 September 2017 of almost the same amount as the 16 September 2017 donation. 
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Following the individual’s donation to Martin Sellner they exchanged several emails in 
January 2018. The relevant emails have been provided to us by Bundesamt fiir 
Verfassungsschutz und Terrorismusbekampfung, the Austrian domestic intelligence agency. 
We set out some of the emails below: 


Date: 6 January 2018 
From: [The individual] 
To: Martin Sellner 


It’s a small amount to give in relation to the large amount 
of work you do. | only wish | could give more. I’m sure 
you already know, but | just wanted to tell you personally 
you have support from people all over the globe and there 
are millions that are relying on you and trust you to fight 
for their values. Keep up the great work, it will be a long 
road to victory but with every day our people are growing 
stronger. Have a great new year, god bless you and god 
bless Europe. 


Date: 9 January 2018 
From: Martin Sellner 
To: [The individual] 


Thank you that really gives me energy and motivation. 

(Just got my second Channel and my 5th bank striked down 
in 2018) If you ever come to Vienna we need to go for a café 
or a beer. ;) 


Date: 10 January 2018 
From: [The individual] 
To: Martin Sellner 


The same extends to you if you ever visit Australia or 

New Zealand, we have people in both countries that would 
happily have you stay in their homes if you ever visit. If you 
are coming to this part of the world at anytime in the near 
future you should contact Blair Cottrell ... or Tom Sewell 
..., both are currently the leaders of a movement similar to 
yours that are establishing clubs and activism throughout 
most Australian capital cities. Keep fighting the good fight, 
[the individual]. 
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We have no evidence that the individual met with either Blair Cottrell or Thomas Sewell 

(see chapter 3). In referring to Blair Cottrell and Thomas Sewell in the emails, the individual 
was not speaking on their behalf. Instead, it is likely that the individual referred to them in 
an attempt to impress Martin Sellner by implying that the individual knew them personally, 
when he did not. 


The individual travelled to Austria and he was there on 9 November 2018 in transit and from 
26 November 2018 to 4 December 2018. He told us that he did not meet Martin Sellner 

at those times and had not tried to do so. We are inclined to accept this denial. There 

is no evidence to suggest they did meet and by this stage we think it unlikely that the 
individual would have wished to do anything that might attract the attention of international 
intelligence and security agencies. 


During our interview with him, the individual indicated he had donated to more organisations 
than those we have listed. It is distinctly possible therefore that he made donations of which 
we are not aware. 
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Chapter 5: Preparation for the terrorist attack 


5.1. The influence of the Oslo terrorist 


A copy of the Oslo terrorist’s manifesto was found on the SD card associated with the 
individual’s drone. There are a number of references to the Oslo terrorist in the individual's 
manifesto. The individual also discussed him when interviewed by New Zealand Police on the 
afternoon and evening of 15 March 2019. We see much of what the individual said about the 
Oslo terrorist in his manifesto and at interview as trolling and he accepted as much when we 
spoke to him. We do, however, consider that the individual was significantly influenced by 
the Oslo terrorist and there are two aspects of this that warrant discussion. 


The first is that the Oslo terrorist’s manifesto and his actions provide considerable 

guidance for would-be extreme right-wing terrorists. To a very large extent, the individual’s 
preparation was consistent with that guidance. This was evident in his joining a gym and 
bulking up with steroids, joining rifle clubs to gain firearms expertise, attempts at operational 
security generally, cleaning up electronic devices to try to limit what counter-terrorism 
agencies might discover after a terrorist attack and might detract from the “optics” of the 
exercise and the preparation of a manifesto to be released at the same time as the attack. 

In these respects, the guidance offered by the Oslo terrorist was largely operational in nature. 
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The second aspect of the influence of the Oslo terrorist on the individual’s planning is more 
subtle and, indeed, odd. In his manifesto and at his trial, the Oslo terrorist claimed to have 
helped re-establish the Knights Templar and to be “Justiciar Knight Commander for Knights 
Templar Europe”. The Knights Templar was a Christian military order founded in Jerusalem 

in 1119, which was active during the Crusades when there were military struggles between 
Christianity and Islam. The original Christian military order was suppressed in 1312. There 
are contemporary organisations that have adopted the name “Knights Templar”. But there is 
no credible evidence to suggest that an organisation as described by the Oslo terrorist exists. 


In his manifesto the individual claimed to have “taken true inspiration from Knight Justiciar 
[the Oslo terrorist]” and to have received a “blessing” from him “after contacting his brother 
knights”. When interviewed by New Zealand Police on the afternoon and evening of 

15 March 2019, the individual made similar claims and referred to the “reborn Knights 
Templar”. So in this respect there is further commonality between the actions of the 
individual and those of the Oslo terrorist. There is also a particular aspect of the individual’s 
conduct relating to this claim that we discuss in chapter 6 of this Part. 


5.2 Obtaining a firearms licence 


On 1 September 2017, just 15 days after arriving in New Zealand, the individual took the first 
step towards obtaining a firearms licence by paying the application fee. Four days later, he 
undertook and passed the required Firearms Safety Course. 
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He was required to provide two referees (one of whom had to be a near relative) who could 
speak to his suitability to possess firearms. The individual identified his sister Lauren Tarrant 
and gaming friend as his referees. New Zealand Police did not accept Lauren Tarrant as a 
referee because she could not be spoken to in person. In the end, gaming friend’s parent 
was added as a referee. 


On 4 October 2017, a Dunedin-based Vetting Officer visited the individual at his home, 
interviewed him and inspected his firearms storage facilities. The Vetting Officer’s 
recommendation, based on that interview and inspection, was that the application should be 
approved. The individual’s referees were interviewed by a different, Waikato-based Vetting 
Officer in their home on 30 October 2017 (gaming friend) and 2 November 2017 (gaming 
friend’s parent). Neither of the two referees disclosed anything adverse about the individual. 


The former Dunedin District Arms Officer approved the licence application on 16 November 
2017. There is no record of when the licence was physically issued, but the individual 

would likely have received it via post approximately two weeks later. We know he had it 

by 4 December 2017 as this was the day he acquired his first firearm. We discuss the firearms 
licensing process in considerably more detail in Part 5: The firearms licence. 


5.3. Firearms, ammunition and other equipment used in the 
terrorist attack 


Firearms purchases 


The details of the firearms that we know the individual purchased are provided in the table 
below. Although it is possible that the individual purchased additional firearms privately 
(as there was no requirement to keep records of private sales), we have seen no evidence to 
suggest such purchases. The firearms listed in the table were all purchased legally from 
New Zealand-based stores. The individual completed the required New Zealand Police 

mail order form” for the firearms that he did not purchase in person, and these sales were 
all authorised by the former Dunedin District Arms Officer (or delegate)."* The mail order 
forms were collected to authorise the purchase of the firearms and, as we discuss below, 
ammunition and not for the purpose of keeping records of these purchases. 








4 In relation to firearms and ammunition able to be purchased with a standard firearms licence, purchasers must fill out a 
New Zealand Police mail order form for any purchases they make online. They must send the form to their local District Arms 
Officer to authorise the sale. If the purchaser meets all of the requirements of the Arms Act 1983, the District Arms Officer will 
email the authorised form direct to the seller, who then finalises the sale. 


8 There are some inconsistencies in the dates of purchase for these firearms. The dates provided in the table are the dates the 
payments were made. The individual may have placed the orders slightly earlier, but for online purchases, the sale is not 
confirmed until New Zealand Police have authorised it. 
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Table 5: The individual’s firearms purchases 2017-2018 





























15 semi-automatic 
assault rifle 











Ltd - purchased 
online 








Description Calibre | Seller Cost Date purchased Later 
Sold 

Tikka T3X Lite .308 Hunting & $1,499.00 4 December 2017 Jv 
stainless/synthetic Fishing Dunedin 
rifle - purchased in 

person 
Windham Weaponry | .223 NZ Hunter Group $1,799.90 5 December 2017 x 
WW-15 semi- Ltd - purchased 
automatic rifle online 
Ranger 870 Magnum |12 gauge Gun City - $349.00 12 December 2017 x 
pump action purchased online 
shotgun 
Norinco SKS semi- |7.62x39 Gun City - $499.00 12 December 2017 Jo 
automatic rifle purchased online 
Mossberg 930 SPX 12 gauge GunCity Hamilton $1,599.00 13 December 2017 x 
semi-automatic - purchased online 
shotgun 
Ruger 10/22 semi- .22 LR Elio’s Gun Shop $695.00 15 December 2017 Jo 
automatic rifle Dunedin 
Uberti lever action —.357 Hayes & associates $2,300.00 18 December 2017 x 
rifle magnum Ltd - purchased 

online 
Mossberg MVP 223 Gun City Dunedin - $766.00 4 March 2018 x 
Predator bolt action purchased on 
rifle Trade Me, but 

collected in person 
Ranger TAC-12 SYN 12 gauge Gun City $999.00 19 March 2018 J 
semi-automatic pump Christchurch 
shotgun action 
Ruger AR-556 AR- .223 Reloader Supplies $1,599.00 18 April 2018 x 
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The individual later sold, via Trade Me, the Tikka T3X Lite stainless/synthetic rifle, 

Norinco SKS semi-automatic rifle, Ruger 10/22 semi-automatic rifle and Ranger TAC-12 SYN 
semi-automatic shotgun. He had the remaining six firearms with him on 15 March 2019. 
These were the Windham Weaponry WW-15 semi-automatic rifle, the Ranger pump action 
shotgun, the Mossberg semi-automatic shotgun, the Uberti lever action rifle, the Mossberg 
bolt action rifle and the Ruger semi-automatic assault rifle. We discuss below how some of 
these firearms were modified prior to the terrorist attack. 


Prior to 15 March 2019, possession of military style semi-automatic firearms was restricted 
to those who had an E Endorsement on their firearms licences. The semi-automatic rifles 
owned by the individual were military style semi-automatic firearms (as defined by law) 

only if fitted with magazines capable of holding more than seven cartridges. But at the 

time of purchase none of them were fitted with large capacity magazines and thus were 

not military style semi-automatic firearms. Accordingly, the individual was able to buy these 
semi-automatic rifles despite not having an E Endorsement. We discuss this in some detail 
in Part 5: The firearms licence. 


Magazines 


The individual purchased online a range of magazines from New Zealand-based businesses. 
Some of the magazines were later sold by the individual to members of the NZ Hunting and 
Shooting online forum. We provide details of the magazines purchased by the individual that 
were used in the terrorist attack on 15 March 2019 in the following table. 


Table 6: The individual’s online purchases of magazines 2017-2018 





Description | Date purchased Seller Cost 


_Magpul PMag 30 Round assault rifle/M4 6 December 2017 Gun Supplies Ltd $109.95 
| Gen M3 Magazine .223 calibre ammunition 


Magpul PMag 30 Round assault rifle/M4 26 December 2017. +GUNSNZ Ltd $86.92 
Gen M3 Magazine .223 calibre ammunition 


Magpul PMag D-6o Round assault rifle/M4 | 9 February 2018 GUNSNZ Ltd $434.74 
Gen Magazine .223 calibre ammunition 





9 February 2018 and GUNSNZ Ltd $749.98 


5 x Magpul PMag 40 Round assault 

rifle/M4 Gen M3 Magazine .223 calibre 20 February 2018 

ammunition 

2 x Magpul PMag 30 Round assault 9 February 2018 CJA New Zealand | $219.90 
rifle/M4 Gen M3 Magazine .223 calibre Ltd 

ammunition 
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The individual also purchased magazine couplers, which he used on 15 March 2019. 
These allowed him to attach two magazines together to facilitate quick reloading. 


All of these firearm magazines were legally purchased by the individual. Prior to 

15 March 2019, there were no regulations in place restricting acquisition of magazines, 
meaning that anyone could legally purchase a magazine of any capacity instore or online, 
without having to produce a firearms licence or complete a New Zealand Police mail 
order form. 


The individual did not have an E Endorsement. So, it was illegal for him to put a large 
capacity magazine into his semi-automatic rifles. He was, however, legally able to use 
large capacity magazines in his Mossberg MVP Predator bolt action rifle. He told us that, 
on occasion, he had used large capacity magazines with this rifle at the Bruce Rifle Club 
if no one else was around. 


Modifications to firearms 


The individual also purchased firearms components and used these to modify his firearms. 
The modifications included: 


a) adding sights to assist accuracy; 
b) adding “buttstocks” to the semi-automatic firearms for better support; 


c) adding a screw-in choke to the muzzle of a shotgun barrel, therefore reducing the spread 
of the pellets and improving the reach of the shot; 


d) modifying the trigger (adding a super dynamic 3-gun model trigger mechanism) of a 
semi-automatic firearm, allowing for lighter trigger pressure and faster trigger resets 
when firing; 


e) adding a muzzle brake to reduce recoil and therefore keep the firearm on target; 


f) adding an ambidextrous charging handle to one of the semi-automatic firearms to make 
cocking the firearm easier; 


g) adding afore grip to the upper receiver of one of the semi-automatic firearms; 


h) adding a bipod (an integral, adjustable front rest for use when firing) to the bolt action 
rifle to increase accuracy; and 


i) adding a strobe light (a device used to produce regular flashes of light) to one of the 
semi-automatic firearms. 


None of these modifications were illegal when the individual made them and several of those 
modifications are commonly made by firearms owners. 
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Community members asked us about these modifications and if the individual received 
assistance to make them. The modifications made to the weapons did not require technical 
firearms expertise. The New Zealand Police Armourer told us there are a number of 

online videos demonstrating how to modify the trigger as referred to above. Similarly, the 
New Zealand Police Armourer said fitting a muzzle brake is a “relatively simple task” and 
most muzzle brakes come with instructions to allow the purchaser to fit the item themselves. 


When we asked the individual about the modifications he said that he thought some of them 
may have been made before he purchased the firearms in question but that he had personally 
completed all after-sale modifications, such as modifying the trigger mechanism, using 

the instructions that came on the packaging of the parts he bought or with guidance from 
videos online. We have seen no evidence to suggest that anyone assisted him to modify the 
firearms. 


Ammunition 


We do not know how much ammunition the individual purchased in total as most sellers do 
not keep records of the ammunition sold in store. We do know that on 24 March 2018, he 
spent $1,358.00 at Gun City Dunedin on 2,000 rounds of .223 calibre Remington 55Gr SP. 


In addition, we are aware of 11 ammunition purchases made online between 5 December 
2017 and 12 July 2018. The details of these purchases are provided in the table below. The 
individual completed the required New Zealand Police mail order form for these purchases. 
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Table 7: The individual’s online purchases of ammunition 2017-2018 



































Date purchased Description Number Seller Cost 
of rounds 
5 December 2017. =‘ Winchester .308 1,000 Lock, Stock and $990.90 
Smoking Barrel 
6 December 2017 _—_ 12 gauge Rio 9 Ball 250 Gun City $249.00 
Buckshot 
6 December 2017 _—_ 12 gauge Imperial 180 Gun City $199.00 
9 Ball Buckshot 
11 December 2017 _~—s-7.62 x 39 millimetre 1,320 Aoraki $499.00 
Ammunition 
Company 
11 December 2017. Rem 55 grain full 1,000 Aoraki $649.00 
metal jacket Ammunition 
Company 
11 December 2017_| Tikka T3X PMC 308 1,000 Arsenal Limited $150.00 
20 December 2017. Freedom Munitions .357 1,000 Ammo Direct NZ $720.00 
Magnum 158 grain flat 
point 
19 February 2018 .223 Federal Power-Shok 400 Gun City $598.00 
Remington 64 grain soft 
point 
19 February 2018 Hornady 12 gauge shot 30 Gun City $89.97 
gun cartridges 
12 July 2018 Perfecta .223 Rem 55 grain 1,000 Ammo Direct NZ | $649.00 
full metal jacket 
12 July 2018 Mossberg MVP, MP Sport 1,000 Ordnance $599.00 
| Belmont Developments 
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Some people who spoke to us expressed concern about the amounts of ammunition that 
the individual acquired. The individual told us that he did not regard his purchases as 
uncommon as firearms owners often buy in bulk. Other people, including the New Zealand 
Police Armourer and ammunition suppliers, told us that the amounts of ammunition bought 
by the individual were not unusual. In any event, his purchases did not give rise to any 
reporting of concerns by the sellers to New Zealand Police. 


Configuration of firearms used in the terrorist attack 


We have identified the firearms the individual had with him on 15 March 2019. As well, we 
have described his acquisition of ammunition and magazines, and the modifications he 
made to some of his firearms. Bringing this information together, the firearms used by the 
individual in the terrorist attack were configured, when first used, as follows: 


a) A Mossberg 930 semi-automatic 12-gauge shotgun with at least seven-shot magazine 
capacity, with capacity for one further shell in the breech. This firearm was fitted with 
a Bushnell “Red Dot” sight. The firearm contained nine “oo Buckshot” shells. 


b) A Windham Weaponry WW-15 military style semi-automatic rifle fitted with a Magpul 
PMag D-60 magazine containing 60 rounds of ammunition. The sighting system on the 
rifle was a Sightmark Holographic sight. The trigger had been modified on, and the 
ambidextrous charging handle had been added to, this firearm. Other changes made 
were the addition of a buttstock, a muzzle brake and a fore grip. 


c) A Ruger AR-15 .223 calibre military style semi-automatic rifle fitted with two Magpul 
PMag 40-round capacity magazines coupled together. The sighting system on the rifle 
was a VIX Strikefire “Red Dot” sight. The individual also attached the strobe light and 
a buttstock to this firearm. 


d) A Ranger 870 pump action 12-gauge shotgun with a five-shot magazine capacity. The 
magazine contained four “oo Buckshot shells” with a fifth in the breech. The muzzle of 
the barrel was fitted with a screw-in choke. 


e) An Uberti .357 Magnum lever action rifle with a tubular magazine with capacity to hold 
13 rounds of .357 Magnum ammunition (12 in the magazine and one in the breech). The 
rifle was fitted with adjustable open sights. 


f) A Mossberg Predator bolt action .223 calibre rifle which was fitted with a telescopic sight, 
a bipod and a Magpul PMag 30-round capacity magazine. 
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Incendiary devices 


The four basic incendiary devices that the individual had in his car on 15 March 2019 were 
made by him. Those devices consisted of four, ten litre containers filled with petrol, with 
lighters and cans of accelerant (gun oil spray) duct-taped to their sides. The individual told 
New Zealand Police that he had intended to use the devices to set fire to the masjidain but 
had not done so. The materials used to make the devices can be easily purchased. 


When we spoke to the individual’s property manager, they recalled a chance meeting with the 
individual one day in January or February 2019 at a hardware store and noticed four petrol 
containers in his trolley. The individual said he was going hunting in a remote area with no 
petrol stations and needed to have enough fuel in reserve to make sure he could get back. 

It is likely these were the same petrol containers the individual had on the day of the 

terrorist attack. 


Figure 8: An image of an incendiary device that was stored in the rear of the individual’s 
vehicle during the terrorist attack 





Photo of an incendiary device removed from the individual’s car after the terrorist attack. The 10 litre container was filled with 
petrol and had lighters and a can of accelerant (gun oil spray) duct-taped to its side. (Source: New Zealand Police) 
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Other equipment for the purposes of the terrorist attack 


The 


a) 
b) 


fo) 


d) 


e) 
f) 


We 
We 


other equipment the individual used in the terrorist attack included the following: 
A 2005 Subaru outback vehicle purchased in Dunedin on 21 August 2017. 


A military style tactical vest and tactical gloves purchased online in New Zealand 
in December 2017. The tactical vest enabled him to carry and have quick access to 
numerous magazines on his person. 


Two ballistic vests. We have been unable to establish where and when the individual 
purchased the ballistic vests. 


Body armour inserted into his two ballistic vests, likely comprised of two ballistic 
ceramic plates and two plastic boards that he purchased online in December 2017 
and January 2019 respectively, from overseas. When we spoke to the individual, he 
confirmed that the plates and boards were body armour. 


The GoPro camera, which he purchased online in February 2018, in New Zealand. 
A bayonet knife and scabbard purchased from a New Zealand-based store in early 2018. 


have been unable to establish where and when the individual purchased his helmet. 
have examined the helmet. It is of a kind used for airsoft sports and is easily obtained 


in New Zealand. 


5.4 Developing expertise with firearms 


Rifle club membership 


The individual became a member of two rifle clubs: 


a) 


b) 
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He became a member of the Otago Shooting Sports Rifle and Pistol Club on 

14 February 2018, after attending a club shoot on 7 January 2018 as a visitor. 

He attended another shoot on 18 February 2018 but was not seen at a club shoot by 
members again. The weapons that could be used at this range were restricted, and 
high-powered hunting rifles and bottle-necked cartridge cases were not permitted. 
This meant that the range was of limited utility for his purposes. He occasionally went 
to the club alone as he could access the club using a combination code to unlock the 
gate (albeit that he was unable to do so in January 2019 when he took his mother and 
her partner there). Members did not have to record their use of the range outside of club 
shoots and therefore we do not know how many times he attended the Otago Shooting 
Sports Rifle and Pistol Club. 


The individual also joined the Bruce Rifle Club on 26 February 2018, having completed 
probationary shoots. According to club records the individual shot there on 
14 December 2017, 21 times in 2018 and a further five times in early 2019. 


There was a suggestion that the individual may have also attended the Leith Valley Rifle 
Range. There are no records of him doing so. 


Bruce Rifle Club members who were interviewed by New Zealand Police after the terrorist 
attack said that the individual was polite and courteous, worked hard during a working bee 
and did not talk much, if at all, about politics. They also said that he was not entirely familiar 
with the safety rules initially, but that he improved over time. These impressions were 
reinforced by three Bruce Rifle Club members who told us he was regular, normal and that 
nothing about him “jumped out” to them. They were not aware of any issues he had with any 
members of the Bruce Rifle Club. 





Some differing views were expressed. One member of the Bruce Rifle Club described the 
individual as “a bit arrogant” but did not provide any specific examples of such behaviour. 
Another member described the individual as being aloof. 
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A few members of the Bruce Rifle Club said three aspects of the individual’s behaviour were 
slightly out of the ordinary and, with hindsight, may be significant: 


a) The individual usually shot while standing up. He went through a large amount of 
ammunition and his primary interests appeared to be firing at extremely fast rates and 
changing magazines quickly. 


b) The individual displayed considerable interest in the military background of one of the 
members, an interest that made that member uncomfortable. 


c) Sometimes the individual made remarks that were interpreted as indications that he 
had access to a large capacity magazine. According to two members, the individual was 
of the view that it was lawful for him to own a large capacity magazine, provided the 
magazine was not fitted to one of his semi-automatic rifles - a view that was arguably 
correct at the time, particuarly as he had, from 4 March 2018, a bolt action rifle to which 
large capacity magazines could lawfully be fitted.” 


When we spoke to him, the individual was very free in acknowledging what he saw as tactical 
errors in the execution of the terrorist attack but was less willing to accept that there 

had been any lapses in his operational security. Consistent with this, he claimed that the 
comments by club members about his shooting style were hindsight reconstructions and that 
a number of other shooters at the club would sometimes fire magazines quickly as “it was fun 
to do”. We are, however, left with the view that his shooting style was somewhat different 
from others at the club. This is unsurprising given his purpose in practising. 





7 We say “arguably correct” as there is case law to the effect that possessing both a semi-automatic firearm and a large capacity 
magazine in circumstances that make it reasonable to believe that they have been used together is unlawful. See Police v Bruce 
DC Wellington CRN-5085022673, 30 May 1996. 
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Firearms accident 


On 13 July 2018 the individual’s right eye and thigh were injured in a firearms accident. He 
was treated at Dunedin Hospital’s Emergency Department. The individual told the Emergency 
Department Registrar that the injury was caused by a round of ammunition exploding while 
he was cleaning a rifle barrel. 


The Registrar treated the individual by removing a metal fragment from his right eye, 

giving him a tetanus vaccination, administering intravenous antibiotics and referring him for 
an x-ray of his right thigh. The Registrar consulted with the hospital’s Orthopaedic Service, 
which advised leaving the metallic fragment in the individual’s thigh as it was unlikely to 
cause any issues. 


The Emergency Department Registrar also consulted with the hospital’s Ophthalmology 
Service. The Ophthalmology Service carried out further testing, prescribed eye drops, 
antibiotics and paracetamol and made a follow-up appointment for the individual to 
attend the acute eye clinic on 23 July 2018. The Registrar who treated the individual in the 
Emergency Department did not notify New Zealand Police about the firearm accident. 


While he was in hospital, the individual’s landlord rang him about property maintenance 
issues. During this call, the individual explained that he had accidentally discharged a 
firearm while cleaning it in the lounge. 


The individual was discharged from the Emergency Department approximately five and a 
half hours after he arrived. The following day, the landlord went to inspect the damage 
caused by the shot. The hole was around seven millimetres in diameter and the bullet was 
lodged in a wooden beam above the ceiling. The landlord fixed the hole. 


At the individual’s follow-up appointment with the Ophthalmology Service on 23 July 2018, 
the Ophthalmology Registrar found that his eye was healing well. The Registrar advised 
the individual that the service did not need to see the individual again unless he had any 
issues. We discuss whether the injury should have been referred to New Zealand Police in 
Part 6: What Public sector agencies knew about the the terrorist. 


The individual told us that at the time of the accident he was concerned the shot might 
have been heard and reported to New Zealand Police. He said he ran through in his mind 
a scenario of what he would say if New Zealand Police officers arrived to question him. 
As it turned out the accident was not reported to New Zealand Police. He told us that he 
also weighed up whether he should seek medical treatment, but his concerns about his 
eyesight outweighed his reluctance to bring himself to official notice. So, he went to the 
Emergency Department but with a prepared explanation. 
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We discuss later the explanations that the individual gave for how the accident occurred. 


Figure 9: Timeline of the individual’s firearms activities in New Zealand 


Date 

17 August 2017 
20 August 2017 

1 September 2017 
5 September 2017 


19 September 2017 


4 October 2017 


30 October 2017 


2 November 2017 


16 November 2017 


4 December 2017 


5 December 2017 


12 December 2017 


13 December 2017 


14 December 2017 


15 December 2017 


18 December 2017 


Event 
The individual arrived in Auckland, New Zealand. 
The individual moved to Dunedin, New Zealand. 


The individual paid the firearms application fee. 





The individual undertook and passed the Firearms Safety Course. 


The individual’s application was entered into New Zealand Police’s 
National Intelligence Application database. 
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The individual was interviewed at his home by a Dunedin-based 
Vetting Officer. 


Gaming friend was interviewed at their home by a Waikato-based 
Vetting Officer. 


Gaming friend’s parent was interviewed at their home by the same 
Waikato-based Vetting Officer. 


The former District Arms Officer reviewed the individual’s complete 
firearms licence application and granted the individual a firearms 
licence. 


The individual purchased his first firearm - a Tikka T3X Lite stainless/ 
synthetic rifle. This was later sold via Trade Me. 


The individual purchased a Windham Weaponry WW-15 semi 
automatic rifle. 


The individual purchased a Ranger 870 Magnum pump action 
shotgun and a Norinco SKS semi-automatic rifle. The individual later 
sold the Norinco SKS semi-automatic rifle via Trade Me. 


The individual purchased a Mossberg 930 SPX semi-automatic 
shotgun. 


The individual attended the Bruce Rifle Club for the first time. 


The individual purchased a Ruger 10/22 semi-automatic rifle. 
This was later sold via Trade Me. 


The individual purchased an Uberti lever action rifle. 
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Date 


7 January 2018 


14 February 2018 


18 February 2018 


25 February 2018 
26 February 2018 
4 March 2018 
11 March 2018 
17 March 2018 


19 March 2018 


24 March 2018 
25 March 2018 
30 March 2018 
14 April 2018 


18 April 2018 


22 April 2018 
12 May 2018 
16 June 2018 
24 June 2018 
8 July 2018 


13 July 2018 


29 July 2018 
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Event 


The individual attended the Otago Shooting Sports Rifle and Pistol 
Club for the first time. 


The individual became a member at the Otago Shooting Sports Rifle 
and Pistol Club. 


The individual attended a club shoot at the Otago Shooting Sports 
Rifle and Pistol Club. 


The individual attended the Bruce Rifle Club. 

The individual became a member at the Bruce Rifle Club. 

The individual purchased a Mossberg MVP Predator bolt action rifle. 
The individual attended the Bruce Rifle Club. 

The individual attended the Bruce Rifle Club. 


The individual purchased a Ranger TAC-12 SYN semi-automatic 
shotgun. This was later sold via Trade Me. 


The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 


The individual purchased a Ruger AR-556 AR-15 semi-automatic 
assault rifle. 


The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 


The individual’s right eye and thigh were injured in a firearms 
accident. 


The individual attended a working bee at the Bruce Rifle Club. 
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Date 

5 August 2018 

18 August 2018 

26 August 2018 

1 September 2018 
9 September 2018 
15 September 2018 
22 September 2018 
6 October 2018 

5 January 2019 

20 January 2019 

2 February 2019 
16 February 2019 


2 March 2019 


Event 


The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 
The individual attended the Bruce Rifle Club. 


The individual attended the Bruce Rifle Club. 


5.5 Getting fit and bulking up 


Gym membership 
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The individual went to a gym in Dunedin from October 2017 to October 2018. He worked 
out there three to four times a week, always alone. He occasionally talked to other 
members at the gym, offering advice about exercise form and technique, or discussing 
his overseas travel. 


In October 2018, the individual went on his third overseas trip from New Zealand. He did not 
go back to the gym after his return to New Zealand in December 2018. He told us that by this 
point he was trying to avoid doing anything that might draw attention to himself. He did, 
however, continue to work out at home. 
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Most of the gym members and staff who were interviewed by New Zealand Police after the 
terrorist attack described the individual in favourable terms, for example as a “nice guy who 
liked to travel” and “generous and willing to help”. On the other hand, two members who 
themselves were friends, said that “there was something about [the individual] that felt off” 
and that he seemed like a “weirdo, but harmless”. Those same two members recalled the 
individual telling them once that he had shot himself while cleaning his firearm and thought 
he may have been using steroids based on a discussion the individual had with one of them. 


One member of the gym interviewed by New Zealand Police after the terrorist attack said 
that they knew the individual as “Barry”. They said that this was how the individual had 
introduced himself. The gym member had no reason to doubt that the individual’s name 
was “Barry”, especially because this member was a friend of the individual on Facebook 
where his username was Barry Harry Tarry. We discuss the possible significance of this in 
Part 7: Detecting a potential terrorist. 


Steroid use 


On 18 December 2017, a doctor from the Dunedin South Medical Centre treated the individual 
for abdominal pain around the liver area. The individual told the doctor that he had been 
taking non-prescribed oral steroids and injecting testosterone. He said he had stopped 
taking the oral steroids on 10 December 2017 but was still injecting himself with testosterone 
two to three times a week. 


The doctor said the individual presented with the “hallmarks of steroid overuse”, in particular 
that he was “moonfaced” (a reference to his then rounded face). The doctor warned the 
individual that taking the testosterone could have “long term consequences for his heart”. 
The doctor later told New Zealand Police that the testosterone the individual was using was 
“most likely [at] a dangerous level”. The doctor said that the individual felt that what he was 
doing was safe and he was cold and inflexible in his position. 


The individual claimed to us that he had been using drugs that were similar to steroids and 
testosterone, a point to which we will return to in Part 6: What Public sector agencies knew 
about the terrorist. 


The doctor referred the individual to Dunedin Hospital’s Endocrinology Service for treatment. 
On 20 December 2017, the Endocrinology Service sent a letter to the referring doctor with 
advice on potential treatment options and an offer to meet with the individual if needed. 

An appointment was not scheduled given the “pressure on clinics” at the time, and because 
the individual’s condition could be managed by his doctor. 


New Zealand Police have not established the source of the individual’s supply of drugs, 
and did not find any during searches of his Dunedin flat or his car after the terrorist attack. 
Our inquiries indicate that the individual may have acquired steroids or similar drugs online. 
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Through his AliPay account, the individual bought 500 hypodermic needles, 300 syringes 
and 200 alcohol swabs on 8 February 2018 from a New Zealand-based medical supplies 
company. He had also purchased a smaller amount of each product from another 

New Zealand-based company on 29 September 2017. We think he likely used these 
needles, syringes and alcohol swabs to inject himself with testosterone. 


We deal with whether the individual’s steroid and testosterone use should have been referred 
to New Zealand Police in Part 6: What Public sector agencies knew about the terrorist. 
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Chapter 6: Planning the terrorist attack 


6.1 Evidence on which we rely 


Evidence of the individual’s preparation for the terrorist attack comes from a variety 

of sources including what he told us directly, his interview with New Zealand Police on 

15 March 2019, a series of emails he sent to himself, mobile phone location data, electronic 
information on the SD card of his drone and an external hard drive (both of which he had sent 
to his sister). We also reviewed social media activity shortly before the terrorist attack and 
the individual’s manifesto. Some of these sources warrant brief discussion. 


The individual used his email account to send notes to himself for future reference. 
Although he deleted his emails before the terrorist attack, a few were recovered. 
Some of the recovered emails record elements of his planning and preparation. 


Before the terrorist attack the individual sent the drone and an external hard drive to 

Lauren Tarrant. The SD card located inside the drone and the external hard drive contained 
files relating to his planning and preparation. New Zealand Police were able to recover 
some text documents from the SD card and external hard drive that he had deleted. It is not 
entirely clear to us how and why some files came to be on the SD card, but the file structure 
suggests the card had been used in another device that may have been the source of the 
files. That he deleted the documents indicates he did not want them to be discovered after 
the terrorist attack. When we interviewed him, he confirmed that this was so. 
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6.2 Planning documents created in 2018 


The first document we have seen that is indicative of a particular plan is a budget created on 
9 February 2018. This was recovered from the SD card: 


= O re 


As of 07/02/2018 have 57395AUD minus 7500 for 
travel to Pakistan and Europe meaning there is 
49895 available for the 550 days. 


90 dollars per day to live 

635 dollars per week to live 

2540 dollars per month to live 
rent=1120 per month 

Phone and internet is 149.96 per month 
food is 480 per month 

power is 80 per month 

Fuel is 150 per month 

Ammo is 380 per month 

80 dollars per month for gym membership 


Total=0 dollars left over for various 


It is unclear whether the 550 days referred to in the budget was to run from 

7 February 2018 or from 9 February 2018 (when the file was created). Either way, his money 
would run out in August 2019. We read the document as being consistent with an 

intention to carry out a terrorist attack around that time. This would have coincided with 

Eid al-Adha, the Muslim festival marking the end of the annual pilgrimage to Makkah (Mecca), 
which in 2019 was celebrated in early to mid-August. When we asked the individual about 
this, he confirmed that he had it in mind to launch an attack in Dunedin during this period 
because of the significance of the date in the Islamic calendar. This plan for a terrorist attack 
in August 2019 was abandoned for several reasons, one of which was that by at least early 
2019 he was running out of money. 
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A file titled “to DO LIST” created on 18 July 2018 recovered from the SD card, held the 
following list: 


After christmas 

More shooting 

Test equipment+gear+buy steel capped boots that match gear 
Cardio/agility/power training to be added to workouts 

Possibly join mma or jiu-jutsu+boxing class 

Look into finances and how much I have left, maybe contact lauren for loan 


Maybe do a last visit to Aus and/or a trip overseas depending on time/ 
money/inclination 


Go through vids/pics/hardrives and house to make sure all is clean and 
good optics 


Do research on other mosques, entry/exits/blocks etc 


Replace anything in that house that is broken,too shitty to be left for 
owners 


Fine tune the go plan 


This indicates that a plan was in place in general terms, but the reference to “other mosques” 
suggests that he had not yet finalised the locations of his terrorist attack. The “go plan” 

was not yet finalised. He told us that he had undertaken internet research on masajid in 
Australia, Europe and New Zealand, which included obtaining layout details. He ruled out 

a terrorist attack on a masjid in the United States of America. For practical and tactical 
reasons, he settled on the South Island as the appropriate location for his terrorist attack. 


The individual did not ask Lauren Tarrant for a loan but did ask her to increase the frequency 
of her payment of his share of rent from their joint rental property. 
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On 20 December 2018, the individual sent the following email to himself: 


Date: 20 December 2018, 5.01am 
From: [The individual] 
To: [The individual] 


kill an armed invader and [receive] a medal, kill an 
unarmed invader and receive a life sentence, but the 
invaders threat remains the same. 





This seems to be a note to himself for a line of argument that is developed in his manifesto. 
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6.3 Laying a false trail - December 2018 


As we have noted, the individual claimed in his manifesto to have received a “blessing” from 
the Oslo terrorist (to whom he referred as “Knight Justiciar”) through his “brother knights” 
for his terrorist attack. And when interviewed by New Zealand Police, he referred to the 
“reborn Knights Templar”. Although the individual acknowledged to us that this claim was 
untrue, he had taken elaborate steps to make it seem believable. 


After the terrorist attack, Sharon Tarrant told Australian Federal Police that the individual 
told her that he changed his travel plans to attend a rally in Poland in December 2018. 


An organisation that calls itself the “Knights Templar Order International” (or sometimes 
Knights Templar International) had advertised a “Knighting Ceremony” to take place in 
Wroctaw in Poland on 15 December 2018. This is an unusual organisation. The material it 
has placed online suggests that it is a marketing operation selling Knights Templar-themed 
products and conferring on those who buy sufficient products the title “Sir Knight”. Knights 
Templar Order International is plainly not the “reborn Knights Templar” promoted by the Oslo 
terrorist. But those who run the organisation have far right political views and in 2019 the 
organisation and one of its leaders were banned from Facebook for spreading hate.”® 





8 Martyn Landi “Facebook ban for Dowson in crackdown on hate speech” Belfast Telegraph (United Kingdom, 19 April 2019) 
www.belfasttelegraph.co.uk. 
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13 The individual was in Poland on 15 December 2018. He spent the night of 14 December 2018 
at Bolestawiec. On 15 December 2018 he drove from Bolestawiec to Nysa. It is possible to 
partially reconstruct his day by reference to credit card transactions. The places and times 
of these transactions are set out in the figure below. 


Figure 10: Known locations the individual visited in Poland on 15 December 2018 


POLAND 
GERMANY 


Bolestawiec 


Lwowek Slaski 
Circle K (convenience store) Wroctaw 
8.43 am 


ol ol(-17 401-1 
F McDonald’s (fast food restaurant) 
tomnica sey mol} 


BP-Lomnijca 923 (petrol station) 
PPPs 


/ 


Karpacz 
Wang Church (tourist attraction) 
NoPE) 


CZECH REPUBLIC 


NESTE 
StaGjayPaliw Moc Jakos (petrol station) 


POLAND 


= 





Kobierzyce is a village in the Wroctaw county and is outside the city of Wroctaw where the 
“Knighting Ceremony” was to take place. 


14. There are a number of possible routes the individual could have taken and driving times 
would have been affected by traffic conditions. Based on the timing of the credit card 
transactions, the maximum amount of time he could have spent in Wroctaw was between 
44 minutes and one hour and 21 minutes. The period of time would be less if, for example, 
weather affected the driving conditions. This leaves very little time for him to have engaged 
with those at the Knights Templar International Order meeting and to receive a “blessing” 
for a prospective act of terrorism. 
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We were provided with information from Agencja Bezpieczenstw Wewnetrznego (ABW), 
Poland’s domestic counter-intelligence agency, that supports our view that the individual did 
not attend the Knights Templar International meeting on 15 December 2018: 


ABW confirm they have no evidence that the individual attended the Knights Templar 
International meeting on 15 December 2078 and they found no evidence to suggest links 
between the individual and extremist “circles” in Poland. 


ABW advised [the Royal Commission] that they have no confirmation [the individual] 
participated in the meeting of Knights Templar International (KTI), which took place on 
15 December 2078 near the city of Wroclaw. 





ABW confirmed that they had not obtained information that would suggest [the individual] 
contacted members of KTI while staying in Poland. 
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The Australian Security Intelligence Organisation also told us that it does not hold any 
information that the individual attended the Knights Templar International meeting: 


[The Australian Security Intelligence Organisation] does not hold any information to suggest 
that the individual ... was ever in contact with the Knights Templar International (KTI). 

[The Australian Security Intelligence Organisation] noted that the individual’s reference in 
his manifesto to “Reborn Knights Templar” was possibly as a homage to [the Oslo terrorist]. 


When we asked the individual about the meeting at which he claimed to have received a 
“blessing” he said that, as we would know, it had not happened. He also said his references 
to the Oslo terrorist were just a “red herring” we “were supposed to follow” but not “eat 

the damn thing”. We accept that aspect of what he told us and are satisfied that he did not 
attend the meeting. 


The individual’s conduct in relation to all of this is strange to say the least. Three months in 
advance of his terrorist attack, he went out of his way to create a trail of evidence in Poland. 
That trail of evidence provided support for what he later told his mother, put in his manifesto 
and told New Zealand Police. The purpose was to add apparent credibility to his otherwise 
not very plausible narrative that he had received international support for his planned attack 
and, consequently, prompt unnecessary official inquiry. That he went to such trouble to 
support what in the end was just an elaborate trolling exercise illustrates the extent of his 
preparation. 
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6.4 Hostile reconnaissance 


On 8 January 2019 the individual drove to Christchurch via Ashburton. He sent an email to 
himself at 4.06 pm on 8 January 2019 noting an address on the other side of the road from 
the Ashburton Masjid. He confirmed to us that this was a reconnaissance exercise. Although 
there has been reporting after the terrorist attack of a drone having been flown in the vicinity 
of the Ashburton Masjid in early 2019, we have no evidence to link this with the individual. 


Later that afternoon, the individual conducted surveillance of Masjid an-Nur in Deans 
Avenue, Christchurch. This included flying a drone over the building and recording an aerial 
view of the masjid grounds and buildings. The individual then flew the drone back over 
Masjid an-Nur focusing on the entry and exit doors, as well as the alleyway where he parked 
his car on15 March 2019. This took place between 5.39 pm and 5.44 pm. In May 2019, a 
member of the public reported that they saw a small drone flying over the length of Masjid 
an-Nur in Deans Ave at approximately 5.45 pm on 8 January 2019. This person was not able 
to see who was flying it. 


We asked the individual about his flying of the drone over Masjid an-Nur. The flight path 
of the drone shows that he had operated it from Hagley Park. He told us he had parked 
his car beside Hagley Park and used a remote control to fly the drone while he stood in the 
park. He played down the significance of the person who saw and remembered the flight. 
He also played down the likelihood of someone seeing what he was doing and recording 
the registration of his car, noting that drones are commonplace now and it was unlikely to 
be noticed. We saw this as another aspect of his reluctance to acknowledge lapses in his 
operational security. 


The individual sent an email to himself at 5.58 pm. The email read: 
Date: 8 January 2019, 5.58 pm 


From: [The individual] 
To: [The individual] 


13 roughly 11mins, front door chnable glass window look 
into msq, side door, two ent most ppl park frnt. 





At 6.16 pm that evening, the individual sent a further email to himself noting that he should 
“gear up behind belgotex building”, which is on Leslie Hills Drive. This is where the individual 
intended to stop and carry out some aspects of his preparation on 15 March 2019. On 

15 March 2019, the individual drove to the Belgotex building but because of the activity that 
was going on in the carpark at the time he went elsewhere to prepare. 
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24 The individual told us that on 8 January 2019, he also drove past the Linwood Islamic Centre 
and that this was also for reconnaissance. A combination of the mobile phone polling data 
and the timing of the drone flight leave him time to have carried out such reconnaissance. 
We are not able to electronically identify his locations at the times of the 5.58 pm and 
6.16 pm emails. The opening comments “13 roughly 11mins” in the 5.58 pm email may refer 
to the drive time from Masjid an-Nur to the Linwood Islamic Centre, which is approximately 
12 minutes. The timing and contents of the email are consistent with the individual having 
driven to the Linwood Islamic Centre after the drone flight. He would also have had time to 
be at Leslie Hills Drive at 6.16 pm when he sent himself a further email and from there to be 
at West Melton where his mobile phone polled at 6.50 pm. 


25 We have set out below a map depicting the individual’s travel on 8-9 January 2019 to 
conduct reconnaissance on Ashburton Masjid, Masjid an-Nur and the Linwood Islamic Centre 
and returned to Dunedin. 


Figure 11: A map depicting the individual’s travel on 8-9 January 2019 
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On 11 January 2019, the individual went to the Masjid Al-Huda, Dunedin Islamic Centre. 
He told us it was his only visit. Following that visit, he sent emails to himself at 1.59 pm and 
2.01 pm in these terms: 


Date: 11 January 2019, 1.59 pm 
From: [The individual] 
To: [The individual] 


Subject: lst arvv dun mq 


last arv 1.56pm, very fast exit, mass exit, b prepared for 
fast loud or fast quiet 


Date: 11 January 2019, 2.01 pm 
From: [The individual] 
To: [The individual] 


Re: lst arvv dun mq 


kick off 4mins before last arrival 





The individual told us that he decided against a terrorist attack at the Masjid Al-Huda, 
Dunedin Islamic Centre. This was for three reasons. First, the building did not look like a 
masjid and therefore would not have the same symbolic significance, second, he did not wish 
to harm Muslim university students who would be likely to return to their home countries 
after finishing their studies (whom he therefore did not regard as being “invaders”) and third 
there was more than one masjid in Christchurch. 


6.5 Planning documents created in 2019 


On 20 January 2019, the individual sent himself a further email: 


Date: 20 January 2019, 4.37 pm 
From: [The individual] 
To: [The individual] 


holds 13 rounds of magnum cartridges, keep sight system 
the same... 





The email included aiming advice which we see no need to repeat. 
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The last planning document we have seen is an electronic file created on 30 January 2019. 
It was recovered from the external hard drive the individual sent to his sister along with the 
drone. The file was another “to do” list and was expressed as follows: 


write on mags 


perfect pushup $10, weight vest $30,After last range day write on gun 
bags and cases 


Go through vids/pics/hardrives and house to make sure all is clean and 
good optics 





prepare package for sending to lauren , drone etc. 
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Clean house fully. 
Week before the go plan Print out 5 copies of manifesto 
two weeks before the go plan, replace batteries in weapons sights 


Write ebba akkerlund on one rifle, refugees welcome on another, 
Turkofagos on another, 


kebab removal device on one weapon and dues vult on another, kebab 
remover on ari5, Alexandre Bissonette 


Sinine Aratus mark(google it) on stock of gun, HERES YOUR MIGRATION 
COMPACT, FOR Rotherham, Jean Parisot de Valette, psalm 144:1, Otoya 
Yamaguchi, seven lives for my country, Anton Lundin Pettersson, 
Trollhattan, Werwolf symbol, TO ENGLAND TO EUROPE TO BRITAIN THEY WERE 
TRUE, symbols in this video 


https: //www.youtube.com/watch [video no longer available] 


27/28th clean out house completely and change passwords on all accounts 
and give steam, origin and starcitizen"] passwords to [gaming friend]! 


29th Wipe clean comp 

Tape power packs to fuel can, chuck in remaining acetone 

Send lauren package on 31th January (wednesday) 

Convert manifesto to pdf, make non editable, then prepare for release. 


Day before, change profile pic, and background as well as change name 





"8 Video game digital distribution services and platforms. 
° Gaming friend said that the individual did not, in fact, send any passwords to them. 
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as O x 


Dunedin to Christchurch takes 5hrs avg leave 8am to be at gear up area 
at 1:15pm, wake up 7am 


Post email to yourself containing the things you need to say to people 
on the go day, and a picture to use on 4chan/8chan.Schedule the SMS to 
send at 2pm using the phones message app(SMS message not facebook) 


Facebook 

One like and I will burn down a mosque 
like it yourself 

Say no more 

Gear up behind belgotex building 
Ashurton mosque 140 melcombe street 


Make facebook album week before with photos pre uploaded, as well as 
vids. On the day early morning link vids and photos to facebook, minutes 
before do the 1 like and burn down mosque posts and upload manifesto to 
facebook, 4chan and 8ch. 


Week before clean car 


Day before set up car with gear for assault 


15th march is go do rain or shine 


There are a few points that arise out of this and what the individual told us about it that 
warrant comment and explanation: 


a) 


b) 


2) 


The individual told us that he did not complete all the activities on the list, for instance 
in relation to accounts and passwords. As noted above, a list of his accounts and 
passwords was recovered from his SD card from the drone. 


A package was sent to Lauren Tarrant that contained the drone and external hard drive 
on 13 March 2019. 


According to what he told New Zealand Police on the afternoon of 15 March 2079, the 
individual prepared a lengthy manifesto that he later deleted before writing the shorter 
version on a Word file, which he created on 22 January 2019, and published on the 
internet on 15 March 2019. The first manifesto has not been recovered. He would not tell 
us and New Zealand Police why he deleted it. Before the individual was sentenced he 
told a psychiatrist that his claims to having written an earlier manifesto were untrue. He 
said he had fabricated this story to give the impression the final manifesto was written in 
haste. This was intended to explain spelling and grammar errors in the final manifesto, 
which he thought may have been interpreted as an indication of a lack of intelligence. 
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d) The passage that begins “One like” and ends “Say no more” is a variant on a meme 
and internet in-joke. 


e) The plan was to attack Masjid an-Nur, followed by the Linwood Islamic Centre. 
The Ashburton Masjid was a potential third target but one that he did not anticipate 
being able to reach. 


f) Leaving aside the fact that 15 March 2019 was a Friday (the day of congregation), 
the individual was not prepared to tell us what the significance of the day was. 


g) The individual told us that he uploaded his manifesto to both 4chan and 8chan. 
We have not seen any evidence that the manifesto was uploaded to 4chan. 


6.6 Inthe lead up to the terrorist attack 


The individual remained in or around Dunedin from 9 January 2019 to the morning of 


15 March 2019. 


Table 8: Data and activity confirming the individual’s presence in Dunedin in the lead up to 
the terrorist attack 


















































Date Mobile call | Banking Bruce Social media Other 
and data transactions | Rifle Club activity 
records attendance 
10 January 2019 J Sold item via Purchaser visited the individual’s 
Facebook. home address. 
11 January 2019 J Sold item via Purchaser visited the individual’s 
Facebook. home address. Reconnaissance 
of Masjid Al-Huda, Dunedin 
Islamic Centre. 
12 January 2019 S 
13 January 2019 J 
14 January 2019 fe JA 
15 January 2019 J Sold item via Individual dropped off item to 
Facebook. purchaser. 
16 January 2019 Ja 
17 January 2019 Plastic boards imported. 
18 January 2019 a The individual sold a firearm back 
to Elio’s Gun Shop. 
19 January 2019 J J 
20 January 2019 JY JY The individual emailed notes to 
himself about aiming. 
21 January 2019 J 
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Date 


22 January 2019 


Mobile call 
and data 
records 


Ss 


Banking 
transactions 


Jv 


Bruce 
Rifle Club 
attendance 


Social media 
activity 


Other 


Manifesto created. 





23 January 2019 





24 January 2019 


Sold item via 
Facebook. 


Purchaser visited the individual’s 
home address. 





25 January 2019 





26 January 2019 





27 January 2019 


Sold item via 
Facebook. 


Purchaser visited the individual’s 
home address. 





28 January 2019 





29 January 2019 





30 January 2019 


The individual created his final 
planning document. 





31 January 2019 





1 February 2019 





2 February 2019 





3 February 2019 





4 February 2019 





5 February 2019 





6 February 2019 





7 February 2019 


cB Bos: NS SN: BS: SS ¢R 


The individual’s vehicle linked 
to Z Energy in Andersons Bay, 
Dunedin. 





8 February 2019 





9 February 2019 





10 February 2019 





11 February 2019 





12 February 2019 





13 February 2019 


eS fey Ss 





14 February 2019 





15 February 2019 





17 February 2019 





18 February 2019 








\ eg S 
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Date Mobile call | Banking Bruce Social media Other 
and data transactions | Rifle Club activity 
records attendance 
19 February 2019 JY A Sold two items via One of the purchasers visited the 
Facebook. individual’s home address. 
20 February 2019 JY 
21 February 2019 J 
22 February 2019 J J 
23 February 2019 Si 
24 February 2019 JY 
25 February 2019 Sa A 
26 February 2019 J 
27 February 2019 i 
28 February 2019 J 
1 March 2019 Si 
2 March 2019 JY JY JY 
3 March 2019 af 
4 March 2019 J J 
5 March 2019 A 
6 March 2019 J J The individual emailed the 
manifesto to himself. 
7 March 2019 J A The individual’s vehicle linked 
to Z Energy in Andersons Bay, 
Dunedin. 
8 March 2019 J J 
g March 2019 A cf 
10 March 2019 J 
11 March 2019 Sa JY The individual The individual downloaded a walk 
updated his through video of Masjid an-Nur. 
Facebook profile 
photo using Spark 
fibre IP address in 
Dunedin. 
12 March 2019 JY Facebook activity 
using IP address in 
Dunedin. 
13 March 2019 Sa JY Facebook and 
Twitter activity 
using IP address in 
Dunedin. 
14 March 2019 JY J Manifesto 
uploaded. 
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In the days and weeks before the terrorist attack the individual took the following steps: 


a) He installed several applications on his phone, including GoPro, LIVE GoPro, Skype, 
Twitter and Discord. 


b) He obtained walk-through video footage of Masjid an-Nur from a public Facebook page, 
which he saved to his phone on 11 March 2019. We are Satisfied that the person who 
posted the video was neither affiliated with the individual nor the far right. We have 
reviewed the video. It was posted by a Muslim individual visiting New Zealand from 
overseas and who shared the video of Masjid an-Nur on Facebook as part of their 
family’s travel photos and videos. 


c) He posted links to extreme right-wing material on his Facebook page and Twitter on 
13 March 2019. At this time, he had three Facebook friends (none of whom had any 
relevance or link to the terrorist attack) and no followers on Twitter. 


d) He tweeted photographs of the firearms and equipment that were later used in the 
terrorist attack. The firearms had been marked up with text referencing extreme 
right-wing ideology and previous terrorist attacks. 


< a = — 


Figure 12: One of the photographs uploaded to Twitter by the individual 


(Source: New Zealand Police) 


e) Hecreated an album on Facebook called “Open in case of Saracens” on 13 March 2019, 
which contained 155 images (including a digitally altered image of Masjid an-Nur in 
flames) and two videos in which extreme right-wing views are expressed and violence 
is advocated. 


f) He removed the hard drive from his computer (which has not been recovered). 
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g) He uploaded his manifesto to Mediafire” on 14 March 2019 at 7.20 pm. There was no 
public access to the manifesto on this site until he posted links to it immediately before 
the terrorist attack. 


h) On the night of 14 March 2019, he spoke to his mother by phone for 28 minutes and to 
his sister for an hour and 16 minutes. His mother told the Australian police that during 
this call he seemed relaxed and happy and made a point of telling her that he loved 
her, which was out of character. His sister told the Australian police that the individual 
said that he loved her - in fact he said this twice - which was unusual. Although the 
individual did sometimes tell her that he loved her, he usually only said this when about 
to leave ona long trip. 





i) He accessed “infinite looper” which loops videos/music to be played on YouTube with no 
user interaction. 
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j) He uploaded “docx” and “pdf” versions of his manifesto to Zippyshare” at 12.20 am 
and 12.21am 0n15 March 2019 respectively. Again there was no public access to the 
manifesto on this site until he posted links to it immediately before the terrorist attack. 


k) Hesent a number of emails to himself on 15 March 2019 at 12.25 am, 12.31 am and 12.32 
am. These emails contained the text he would later use in the emails he sent and posts 
he made on social media immediately before the terrorist attack. It is likely that he sent 
these emails to himself so that he could quickly copy and paste the text into the emails 
and social media posts. 


\) At6.26 amon 15 March 2019, he posted a Tweet containing links to the file sharing sites 
where his manifesto could be found. He had no Twitter followers at this time and as we 
explain below, it is likely that these were protected Tweets until immediately before the 
terrorist attack. 


There are some issues that we should emphasise about his online posts, because if those 
posts were visible when they were made they may have alerted people to the terrorist attack. 


The privacy settings of the individual’s Facebook page prior to 15 March 2019 cannot be 
determined. However, we know that at 12.19 pm on 15 March 2019, the individual searched 
via the Google Chrome browser on his mobile phone for his own Facebook account. This was 
likely to check his profile was publicly viewable so that the livestream could be viewed by an 
audience. This suggests that his Facebook page was previously private. If that is the case, 
his Facebook page would likely have been visible to the public only in the hours immediately 
preceding the terrorist attack on 15 March 2019. 





1 A file hosting, file synchronization and cloud storage service. 


*» A free cloud-based file hosting storage service. 
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Tweets are publicly visible by default. However, Twitter users can restrict their Tweets so 
that they can only be viewed by their followers (these are called “protected Tweets”). 

It cannot be determined whether the posts made by the individual to his Twitter account 

on 13 March 2019 were public or were protected Tweets. We know that, at the time of the 
terrorist attack, these posts were not protected Tweets. Consistently with what we have said 
in relation to the individual’s Facebook settings and his attempts at operational security, it 

is reasonable to assume that the Tweets on 13 March 2019 were initially “protected Tweets”, 
with the individual later (probably on 15 March 2019) changing his settings to ensure they 
were publicly visible by the time of the terrorist attack. 


The manifesto was not able to be seen until the individual posted links to the online 
platforms where it was uploaded. 


6.7. Financing the terrorist attack 


Analysis by New Zealand Police shows that the individual’s terrorist attack was entirely 
self-funded, at a total estimated cost of NZ$60,000. This included travel to New Zealand, 
the individual’s living expenses while he was planning the terrorist attack and the acquisition 
of the items used to facilitate the terrorist attack. Around half of this amount (approximately 
NZ$30,000) was spent on firearms and firearms-related items. There is no evidence to 
suggest that any other parties provided any money to fund the terrorist attack. 


Our conclusion on this point is based on a review of the individual’s financial activities from 
1 January 2010 to 15 March 2019, which reveal no material inflow of money other than that 
received from his father and income derived from investments he made using that money. 
As we Set out earlier, when we interviewed the individual, he said that he primarily used 
Bitcoin as currency and that any investments in Bitcoin were limited. 
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Chapter 7: Assessment of the individual and 
the terrorist attack 


In his manifesto, the individual suggested that his original intention was to train in 

New Zealand for an attack elsewhere. However, we consider that his intention from the 
outset was to carry out a terrorist attack in New Zealand. This was certainly his intention 
by 9 February 2018 as is established by the first of his planning documents. 


By the time of writing his first planning document in February 2018 he had already 

obtained a firearms licence. In addition, in December 2017 he had acquired a number of 
semi-automatic rifles and large capacity magazines as well as other material (including 
body armour) that he used in the terrorist attack. His training and preparation presupposed 
the use of semi-automatic firearms with large capacity magazines. He could not take such 
weapons to Australia and likewise could not lawfully acquire them there. 





From his point of view, New Zealand was an ideal place for him to prepare, plan and carry out 
a terrorist attack. As an Australian he was able to fit in well enough with those he engaged 
with. New Zealand’s permissive firearms laws, particularly the regulation of semi-automatic 
firearms, which we discuss in more detail in Part 5: The firearms licence, were also a likely 
influence on his decision to carry out an attack in New Zealand. In addition, he did not have 
close connections in New Zealand and so there was no one likely to raise an alarm about the 
way he was living and how he was acting. His mother and sister were worried about him, but 
they were not in regular face-to-face contact with him. Although his way of life was distinctly 
odd, living alone in a sparsely furnished flat, not working, not engaging closely with anyone 
and spending large amounts of time online, at rifle clubs and the gym, there was no one who 
could see the complete picture until perhaps the visit of his mother in December 2018 and 
January 2019. 
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By personality, the individual was well equipped to prepare, plan and carry out a terrorist 
attack. He has limited and perhaps no empathy for those he has been able to “other”, most 
particularly Muslim migrants in Western countries. This meant he was able to contemplate 
with equanimity large scale murder of people he had never met. He is reasonably intelligent 
and was thus able to undertake the necessary preparation and develop a complex but 
actionable plan for his terrorist attack. He has no apparent emotional need for close 
engagement with others, largely eliminating the likelihood of “leakage”, that is the disclosure 
of his intentions to others who might inform counter-terrorism agencies. He also was or 
became technically proficient across a range of skills. In terms of computers and the internet 
he is very much a digital native and he was well able to modify firearms he acquired to best 
suit his purposes. 
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The individual’s behaviour prior to the terrorist attack was consistent with his extreme 
right-wing views. The language of his online posts - explicitly rejecting the use of violence 
to resolve immigration issues, but offering no democratic solution - was consistent with 
that often employed by those on the extreme right-wing. He used memes and irony familiar 
to those on the far right to disclaim a real commitment to extreme right-wing ideas, while 
still espousing them. In addition, the individual’s familiarity with trolling influenced his 
preparation for the terrorist attack. For example, the false trail in relation to the “reborn 
Knights Templar” and a number of the sections in his manifesto were just trolling exercises. 


We see the terrorist attack as resulting very much from an unhappy conjunction of his 
personality (affected as it may have been by his upbringing), his financial circumstances 
resulting from the money his father gave him, his underlying political views (particularly his 
ethno-nationalist views and his belief in the Great Replacement theory) and his way of life 
(funded with his father’s money), which limited the likelihood of his views being tempered by 
ordinary interactions with others. 


The individual was in no hurry to carry out his terrorist attack. We have seen no evidence 

to suggest that he ever intended to work to earn money and we have no doubt that the 
eventual timing of the terrorist attack was significantly driven by his financial circumstances. 
He was cautious in his preparation and generally tried to avoid attracting attention. In this 
he may have been assisted by his personality, which enabled him to operate without a need 
for regular or deep engagement with others. He generally attempted to maintain operational 
security with only limited lapses. His preparation was methodical, and his planning detailed 
and elaborate. 


Many of those we have spoken to have expressed the view (or at least suspicion) that others 
must have played a role in the planning, preparation and execution of the terrorist attack. 


It is true that following his arrest, the individual told New Zealand Police, both when he was 
stopped and later that afternoon while being interviewed, that up to nine other people were 
actively involved in the terrorist attack. At one stage he referred to “nine more shooters”. 
He also said that there are “like-minded” people in Dunedin, Invercargill and Ashburton. 

As we have explained, he further claimed to have been in touch with the Oslo terrorist’s 
“organisation” which he called the “reborn Knights Templar” and which he said had givena 
“blessing” for the terrorist attack. He also referred to other people in other jurisdictions and 
also to training. Aspects of what he told New Zealand Police were reported to the public on 
the afternoon of 15 March 2019, in particular that there were thought to be other shooters 
who were active. This has contributed to community perceptions that others may have been 
involved. 
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When we interviewed the individual, he said that he had acted alone and that what he had 
said in his manifesto and to New Zealand Police to the contrary was untrue. We accept that 
this is so. Just as the claim of an association with the Oslo terrorist and “reborn Knights 
Templar” was a false trail, so too were his claims that other shooters were involved in the 
terrorist attack. There are a number of reasons for this conclusion that he acted alone. 


The first place to start is the interview with New Zealand Police on the evening of 

15 March 2019. The narrative of events that he gave was all about himself and did not 
leave room for participation by others. The “nine more shooters” did not materialise. 
So, from a very early stage New Zealand Police were satisfied that he had acted alone. 





He had his own money and did not require outside funding. We know what equipment he 
used and how he paid for it. No one else was involved. He trained for the terrorist attack 
by gaining proficiency with firearms, attaining a high level of fitness and bulking up on his 
own, albeit with the assistance of drugs. We know the broad details of his reconnaissance 
at Masjid an-Nur and in Dunedin and Ashburton. He also told us of limited reconnaissance 
of the Linwood Islamic Centre on the late afternoon of 8 January 2019. There is no evidence 
of anyone else being involved. Indeed, given the nature of his reconnaissance, he did not 
need assistance from anyone else. He was able to obtain any additional information he 
needed from the internet. 


a 
oO 
ot 
© 
A 


The planning documents that are discussed in chapter 6 were either emails to himself 

or located on the SD card of the drone or external hard drive. None of those documents 
indicate involvement of other people. The individual did not intend these to be seen after the 
terrorist attack as he had deleted them. We have set out earlier in this Part extracts of those 
documents that are relevant to his planning, despite the distressing nature of some of what 
was said. The overwhelming impression of this material in its totality is that the individual's 
planning for his terrorist attack was a solo effort. 


We have reviewed the GoPro footage that the individual recorded, along with CCTV footage 
from Masjid an-Nur. This material gives no indication of anyone else participating in the 
terrorist attack. During the terrorist attack he was heard talking to others but this was only 
to his online audience. It was a one-way conversation. 


Engaging others in the planning or execution of the terrorist attack would have been 
inconsistent with his introverted personality. More generally his approach was influenced by 
that of the Oslo terrorist who was also a lone actor. 


We acknowledge a view is held in the community that, while the individual may have acted 
alone on 15 March 2019, he formed part of a network of people holding similar views to him 
and therefore was not, in that sense, a “lone actor”. 
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We have no doubt that the individual’s internet activity was considerably greater than we 
have been able to reconstruct. The style in which his manifesto was written indicates fluency 
in the language customarily used on extreme right-wing websites and associated memes and 
in-jokes. The individual confirmed to us that he visited 4chan and 8chan and it is likely 

that he contributed comments (although we have no direct evidence of this). He also 

visited other sites and discussion boards where there was discussion promoting extreme 
right-wing and ethno-nationalist views similar to his own and sometimes supporting violence. 
He also spent much time accessing broadly similar material on YouTube. His exposure to 
such content may have contributed to his actions on 15 March 2019 - indeed, it is plausible to 
conclude that it did. We have, however, seen no evidence to suggest anything along the lines 
of personalised encouragement or the like. 


For these reasons we conclude that the individual is appropriately labelled a lone actor. 
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Chapter 8: Questions asked by the community 


Many of the questions raised by the community were focused on whether the individual was 
alone actor. We have addressed this issue in the preceding chapter and for this reason our 
answers to these questions are brief. Other questions relate to the firearms licence and we 
deal with those in Part 5: The firearms licence. There are a number of other questions that 
we address below. 


8.1 Background of the individual 


Did the individual have a history of recreational firearms use? 





There is no evidence that the individual had any significant history of recreational firearms 
use before applying for his licence. He had used firearms when in New Zealand in 2013 and 
probably in August 2017, and twice at tourist attractions overseas. 
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The individual had not owned firearms before arriving in New Zealand. 


Was the individual military trained? 


We have seen no evidence indicating the individual received military training. The claim in 
his manifesto that he is a United States Navy-trained SEAL is untrue. 


8.2 Assistance, motivation and/or encouragement for the 
terrorist attack 


Was the individual really a lone actor? Did he have direct support (that is more than 
one person was involved in the terrorist attack) or indirect support (that is from online 
communities)? 


In the individual’s communications before 15 March 2019, was he motivated or recruited 
by anyone to perpetrate terrorist acts or did he motivate or recruit anyone to perpetrate 
terrorist acts? 


Yes, he was a lone actor and no one else was involved in the planning, preparation or 
execution of the terrorist attack. There is no evidence that anyone else was aware of his 
plans or provided personalised encouragement. It is, however, likely that his thinking was 
affected by what was said in far right online communities and other far right material he was 
able to source from the internet. 


The individual was not recruited by anyone living in either New Zealand or overseas to 
commit terrorist acts. However, in acquiring semi-automatic weapons, joining a rifle club 
and a gym, in taking anabolic steroids and testosterone and in committing acts of terrorism, 
the individual was following a course of action similar to that of the Oslo terrorist. A copy 
of the Oslo terrorist’s manifesto was found on the SD card of the individual’s drone. In this 
sense we think that he was motivated by him. 


We hold no evidence that the individual, in any of his communications prior to 15 March 2019, 
sought to motivate or recruit any person living in New Zealand or overseas to commit 
terrorist acts. He did, however, post the comments discussed in chapter 4, which ina 
general sense promoted his terrorist ideology. 


Was the individual part of a gang or group? 


No, he was a lone actor. 


8.3 Possible associations of the individual 
What do you know about the individual’s social networks, his friends and acquaintances? 


Did the individual associate with people residing in New Zealand who have expressed 
sympathy with white supremacist ideology or other forms of right-wing extremism? 


This is discussed earlier in this Part. His mother and sister were living in Australia. They 
were aware of his far right and racist views and his ownership of firearms and worried about 
him. They were not aware of his planning and preparation for his terrorist attack. With 

the exception of his sister and his mother, his engagement with others was limited and 
superficial. 


We are not aware of the individual associating with extreme right-wing people in 

New Zealand. He was active in online message boards and groups and it is possible other 
participants active in those forums also resided in New Zealand. Gaming friend was aware 
of the individual’s political views and that he was in the habit of expressing racist and 
IsLamophobic opinions. While gaming friend did not dispute or challenge those views or 
opinions, gaming friend’s involvement in such discussions was usually passive. There 
were only three occasions (or periods of time) when the individual and gaming friend met 
face-to-face (in 2013, August 2017 and January 2018). 


8.4 The individual’s activities in New Zealand 


Why did the individual select Dunedin to live in? 


The individual told friends and family that he chose to live in Dunedin because of its climate, 
Scottish heritage and low levels of immigration. He mentioned its architecture to us. He may 
have wished to ensure he did not need to have regular engagement with anyone he knew 
such as gaming friend and gaming friend’s parent, and his sister and mother. This would 
have reduced the likelihood of his way of life raising concerns that may have been reported. 
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Did the individual have to provide a reference to secure his rental property tenancy in 
Dunedin? If so, who was it? 


No. The individual told the property manager that he owned rental property in Australia 
(which he did, jointly with his sister). The individual paid the first two months’ rent in 
advance, bond and letting fee when signing the rental tenancy lease. 


He was not required to provide a friend or family member as a reference. We were told by 
the property manager this is not uncommon. 


Did the individual live alone? 


Yes, the individual lived alone. 


People have heard that the individual drove approximately 3,800 kilometres since he 
purchased his car. Where could he have travelled in this time? 


The individual purchased his vehicle on 21 August 2017. When the individual’s car was 
stopped by New Zealand Police on 15 March 2019, the total amount of kilometres on his 
car was 82,804 (compared with 72,500 kilometres when he purchased it). It appears the 
individual travelled around 10,304 kilometres while he owned the car. The travel we can 
account for amounts to 5,653 kilometres. 


Between the 21 August 2017 and 15 March 20719, the individual travelled to the Bruce Rifle 
Club 27 times. This would have amounted to 2,894.4 kilometres. 


Between 6-8 March 2018, the individual travelled from Dunedin to Akaroa and back. 
This would have amounted to 832 kilometres. 


He also travelled to Te Anau and Invercargill with his mother and her partner. This would 
have amounted to 658 kilometres. 


The individual travelled to Masjid an-Nur on 8 January 2019 to conduct reconnaissance. 
This would have amounted to 361 kilometres. When he travelled back to Dunedin he went 
via the Mackenzie Country. This would have amounted to approximately 540 kilometres. 


The individual travelled to Masjid an-Nur and Linwood Islamic Centre on 15 March 2019. 
This would have amounted to 367.5 kilometres. 


The travel set out above amounts to a total of 5,653 kilometres. The balance of the 
10,304 kilometres (4,651 kilometres) is consistent with normal travel around Dunedin 
between 21 August 2017 and 15 March 2019. Making allowances for his overseas trips, 
we calculate this indicates daily vehicle usage of approximately nine kilometres. 
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Had the individual made any living arrangements for after his terrorist attack? 


The individual had arranged to terminate the lease on his Dunedin flat on 1 April 2019 and 
sold most of his personal effects prior to 15 March 2019. 


He had made no plans for living arrangements after the terrorist attack as he understood that 
if he survived the terrorist attack he would be imprisoned. 


8.5 Possible planning by the individual 


Did the individual visit Masjid an-Nur in person prior to the terrorist attack on 
15 March 2019? 


We have seen no evidence that the individual entered the property occupied by 
Masjid an-Nur prior to the terrorist attack on 15 March 2019. 


We know the individual undertook reconnaissance of Masjid an-Nur on 8 January 2019 by 
observing it from outside and flying a drone over the masjid. The individual told us that he 
stood in Hagley Park (opposite the masjid) when he was flying the drone. This is consistent 
with the flight path of the drone. 


The evidence we have received indicates that this was the closest the individual came to 
Masjid an-Nur prior to the terrorist attack on 15 March 2019. 


The individual obtained, through other means, the internal layout of Masjid an-Nur. In 
particular, the individual acquired walk-through video footage of the Masjid an-Nur from 
a publicly available Facebook page that he saved to his phone on 11 March 2019. 


We are satisfied that the individual remained in or around Dunedin from 9 January 2019 to 
the morning of 15 March 2019. 


Did the individual visit the Linwood Islamic Centre in person prior to the terrorist attack 
on 15 March 2019? 


We have seen no evidence that the individual entered the property occupied by the Linwood 
Islamic Centre prior to the terrorist attack on 15 March 2019. 


The individual told us that he drove past the Linwood Islamic Centre in the late afternoon 
of 8 January 2019 and that this was for the purpose of reconnaissance. 

Did the individual visit masajid in New Zealand, including Ashburton, Christchurch, 
Dunedin, Hamilton or Wellington? 


The individual undertook reconnaissance of masajid in Christchurch, Ashburton and Dunedin. 


We have seen no evidence the individual visited masajid in Wellington or Hamilton and he 
also told us he did not visit these masajid. 
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The individual’s mobile phone records placed him near the Invercargill Masjid on 2 January 
2019. However, he told us this was not a reconnaissance exercise. This is likely to be correct 
as, at that time, the individual was travelling with his mother and her partner. 


How did the individual know the “perfect time” to enter the masjidain? 


He was able to research prayer times online and knew Friday was an important prayer day 
and therefore the Christchurch masjidain would be well attended. 


8.6 Firearms and weapons 





Where did the individual purchase his firearms from? 


The individual purchased three firearms in person from New Zealand-based firearms 
stores and purchased a further seven firearms not in person by completing the required 
New Zealand Police mail order form. It is conceivable that he bought and sold other 
firearms privately but we have seen no evidence of this. 
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How, and who, modified the individual’s firearms? 


We believe the individual modified his own firearms. There is no evidence to suggest that 
anyone else assisted him with the modifications. 


When we interviewed him, he said he used YouTube tutorials and instructions on the 
packaging of parts he had purchased to do the modifications. 


How was the individual able to accumulate firearms and ammunition without drawing 
any attention? 


As a standard firearms licence holder, the individual could legally purchase firearms and 
ammunition. There is no limit on the number of firearms that someone can buy or own with 
a standard licence. Likewise, there is no limit on the amount of ammunition someone can 
buy or own. 


New Zealand Police held copies of the individual’s mail order purchase forms. These were 
collected to authorise the online purchase of firearms and ammunition, and not for the 
purpose of keeping records of firearms ownership or how much ammunition individuals were 
acquiring. 

Did the individual use a fully automatic gun? 


No. He used semi-automatic rifles and shotguns and a lever action rifle. 
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Was the ammunition the individual purchased only able to be used in a military style 
semi-automatic, for which an E Endorsement would have been required? 


No. The ammunition purchased by the individual could be used with firearms able to be 
possessed by the holder of a standard firearms licence. 


How could the individual afford to purchase his firearms and ammunition if he was 
unemployed? 


How could the individual afford to travel if he was unemployed? 


How did the individual fund the terrorist attack? Did he bring funds into the country? 


The individual received approximately AU$457,000 from his father. This money (and income 
from investments made with it) meant that he did not have to work and was able to purchase 
his firearms and ammunition, fund his travel and prepare for the terrorist attack. 


The individual held bank accounts in Australia and New Zealand, which he continued to use 
while living in New Zealand. He held an Australian bank account that contained the bulk of 
his investments. He transferred funds from his Australian bank accounts to his New Zealand 
ANZ Bank account, which he used, partly, to purchase items in New Zealand. 


The individual’s mother allegedly stated the individual got his firearms out of the car 
when she visited him, so he could show them to her. Why was he carrying the firearms in 
his car all the time? 


The individual’s mother told police in Australia on 17 March 2019 that when she visited him in 
Dunedin at the end of 2018, the individual asked her to hold one of his firearms, which he had 
taken out of a bag in the lounge room of the 112 Somerville Street property. The individual’s 
mother stated she was uncomfortable with the idea of holding the firearm but agreed to do 
as asked. The individual photographed her with the firearm. 


There is no evidence that the individual always carried firearms in his car, although he 
obviously had firearms in his car when he drove to rifle clubs. 


The improvised explosive devices that were found in the individual’s vehicle - how were 
they acquired, how did he know how to make them, and what was their purpose? 


Four basic incendiary devices (which were not improvised explosive devices) were found in 
the individual’s vehicle on 15 March 2019. The incendiary devices consisted of four, ten litre 
containers filled with petrol, with lighters and cans of accelerant (gun oil spray) duct-taped 
to the side. The materials the individual used to make the devices were able to be easily 
purchased. The individual told New Zealand Police he intended to use the incendiary devices 
to set fire to the masjidain, but he did not do so. 


240 


8.7. Other matters 


How was the individual able to transfer money from his Australian bank accounts to his 
bank accounts in New Zealand without attracting attention? 


Reporting entities (defined in the Anti-Money Laundering and Countering Financing of 
Terrorism Act 2009), such as banks, are required to identify their customers who transfer 
money internationally in accordance with the requirements of the Anti-Money Laundering 
and Countering Financing of Terrorism Act 2009. 


Providing a New Zealand bank identified the individual as the person making the international 
transfers, there would be no impediment to him transferring money internationally. In 

order for the individual’s international money transfers to attract attention, a New Zealand 
bank would need to have reasonable grounds to suspect that the transfers may be relevant 
to detecting an offence before they could report this information. The international 

money transfers would not, in and of themselves, reach the reporting threshold under the 
legislation. 





=I 
=s 
oO 
oe 
oO 
= 
° 
as 
wn 
ct 


We understand informal or hawala arrangements are used by some members of the 
community to transfer money internationally. Transfers of this kind over $1,000 have 
additional due diligence requirements on banks. These requirements did not apply to the 
individual’s money transfers. 


Did the individual in any of his communications prior to 15 March 2019, signal his 
intention to perpetrate one or more terrorist acts? 


The only intention signalled by the individual prior to 15 March 2019 to perpetrate terrorist 
acts was through writing his manifesto (which was not publicly available until 15 March 2019), 
and through his notes to himself that indicated his reconnaissance of masajid and other 
preparation for 15 March 2019. 


These documents were not visible to anyone else and, in that sense, were not communicated 
prior to 15 March 2019. 

Have New Zealand Police reviewed the footage from CCTV cameras in the vicinity of the 
masjidain that were attacked on 15 March 2019? 


Yes, New Zealand Police have reviewed the CCTV footage that was available in the vicinity of 
the masjidain that were attacked on 15 March 2019. 
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Have New Zealand Police identified the woman that visited the Masjid an-Nur on 
14 March 2019? Have they identified what, if any, role she had in the 15 March 2019 
terrorist attack? 


Yes, New Zealand Police have interviewed the woman who was identified as being at the 
Masjid an-Nur on 14 March 2019. They are satisfied that the woman concerned had a 
reasonable explanation for entering Masjid an-Nur, and there was nothing suspicious in 
her explanation. They are satisfied that she had nothing to do with the terrorist attack 
on 15 March 2019. 


Did the individual know Philip Arps? 


There is no evidence the individual knows Philip Arps or that there was any other 
connection between them. 


Is there is any connection between the individual and Troy Dubovskiy, who took his 
life during a New Zealand Police pursuit on 27 March 2019? 


There is no evidence the individual knew Troy Dubovskiy or that there was any other 
connection between them. 
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Glossary 

Term Definition 

4chan An image-based message board on the internet where anyone 
can post comments and share images anonymously. 

8chan A former website composed of user-created message boards 
similar in structure to 4chan. 

CCTV Closed-circuit television, also known as video surveillance, 
is the use of video cameras to transmit a signal to a specific 
place, ona limited set of monitors. 

CET Central European Time. 





counter-terrorism 
agencies 


New Zealand Police and the New Zealand Security Intelligence 
Service. 
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cryptocurrency Digital or virtual currency based on a vast network of 
computers, which allows it to exist outside the control of 
governments and central banking authorities. 

dark web Part of the internet that is not visible to search engines and 


requires the use of specialist anonymising software to access. 





digital native 


A person who has grown up in the digital age. 





Internet Protocol 


address (IP address) 


A unique number linked to each device connected toa 
computer network that uses the Internet Protocol for 
communication. 





magazine 


A device that contains ammunition to feed into the chamber of 
a firearm. 





massively multiplayer 
online role-playing games 


A combination of role-playing video games and massively 
multiplayer online games, in which a large number of players 
interact with each other in a virtual world. 





An image, video or piece of text, typically humorous in nature 





meme 
that is spread via the internet, often through social media. 
mobilisation The process by which a radicalised person moves from an 


extremist intent to preparatory steps to engage in terrorist 
activity, such as researching potential targets, training or 
increased use of concealment behaviour. 
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Term 


Oslo terrorist 


Definition 


An individual born and raised in Oslo, Norway who committed 
a terrorist attack in Oslo and on Utgya Island, Norway on 
22 July 2011. 





Secure Digital card 
(SD card) 


A digital storage card used in portable electronic devices. 








Tor browser 


Software that allows users to surf the web anonymously by 
concealing the user’s location as well as what they are looking 
at online. It can also be used to access the dark web. 








trolling 


The deliberate act of making comments, usually on internet 
forums, to provoke a reaction from readers. 





Virtual Private Network 
(VPN) 
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Software that allows the user to create a secure connection to 
another server over the internet. Once connected, the user 
can browse the internet using that server. In doing so, the user 
is provided with an Internet Protocol (IP) address associated 
with the different server, which hides the user's location. 
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Chapter 1: Introduction 


Our Terms of Reference required us to examine how the individual obtained a firearms 
licence, weapons and ammunition and to make findings as to: 


4(d) whether any relevant [Public] sector agency failed to meet required standards 
or was otherwise at fault, whether in whole or in part. 


The Terms of Reference directed us not to inquire into “amendments to firearms 
legislation”. This direction restricted the scope of what was required of us, particularly as to 
recommendations that we might otherwise have made. 


New Zealanders do not have a constitutional right to possess firearms’ and their entitlement 
to do so has long been constrained by law, as is well described in the 1997 report of 
Sir Thomas Thorp into firearms control (the Thorp Report).? 


For many decades the regulation of firearms was mainly based on the registration of 
individual weapons. But with the enactment of the Arms Act 1983, New Zealand moved from 
a system focused primarily on the firearm itself to one focused on the suitability of people 
to possess firearms.? Under this system, the risk of inappropriate people having firearms 

is primarily mitigated by a firearms licence being required to possess and acquire firearms 
and a New Zealand Police-administered process to determine whether a person seeking a 
firearms licence is “a fit and proper person to be in possession of a firearm”. This phrase is 
very much a focus of this Part. Restrictions were also imposed in relation to certain types 
of firearms. 


Despite having only arrived very recently in New Zealand and having no family and few 
connections here, the individual was able to obtain a firearms licence. This firearms 
licence enabled him to obtain the firearms that he used in the terrorist attack, including 
the semi-automatic rifles. 


In this Part, we examine closely the ways in which semi-automatic firearms, and in particular 
military style semi-automatic firearms, have been regulated, the firearms licensing process, 
the firearms licensing system and how the individual obtained a firearms licence. At the end 
of this Part we make findings and answer questions from the community. 





The Kiwi Party Inc v Attorney-General [2020] NZCA 80, [2020] 2 NZLR 224 at paragraph 27(d). 


i 


Sir Thomas Thorp KNZM Review of Firearms Control in New Zealand: Report of an Independent Inquiry Commissioned by the 
Minister of Police (Thorp Report) (Government Printer, June 1997) at pages 9-23. 


w 


See section 25 of the Arms Act 1983 as enacted. Records of individual firearms were able to be kept by New Zealand Police for 
pistols and restricted weapons, as acquisition permits were required in respect of such firearms. These firearms made up a very 
small proportion of total firearms. See Sir Thomas Thorp KNZM, footnote 2 above at page 17. 
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Figure 13: A guide to New Zealand firearms legislation, regulation and operational 
documents 


af Arms Act 1983 


The primary statute controlling the possession and use of firearms and airguns. 


Introduced a system of firearms control based on the suitability of people to 
possess firearms. 


Does not define a “fit and proper person”. 


Provided for three categories of licences and four types of endorsements to possess 
pistols and restricted weapons. 


Imposed limitations on the importation and possession of pistols and restricted 
weapons. 


a Arms (Restricted Weapons and Specially Dangerous Airguns) Order 1984 


Declared a number of weapons to be restricted but semi-automatic firearms were 
not included. 


aj Arms Amendment Act 1992 
Introduced following the mass shooting in Aramoana, near Dunedin, in 1990. 
Imposed new restrictions on military style semi-automatic firearms. 


Required licence holders to have an E Endorsement to possess and procure military 
style semi-automatic firearms. 


af Arms Regulations 1992 


Set the conditions relating to the firearms licensing application process and 
safety precautions. 


Introduced the requirement for all firearms licence applicants to complete a 
Firearms Safety Course. 


a Arms (Military Style Semi-automatic Firearms and Import Controls) Amendment 
Act 2012 


Amended the definition of military style semi-automatic firearms and placed 
restrictions on the importation of airguns that look like pistols, restricted weapons 
or military style semi-automatic firearms. 
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Arms Manual (2002) 
New Zealand Police’s primary policy document on the administration of the Arms Act 


Defines a fit and proper person as a person of good character, who can be trusted to 
use firearms responsibly and will abide by the laws of New Zealand. 


Master Vetting Guide (2005) 
New Zealand Police’s training notes for firearms licensing staff 


Sets out how applicants and near-relative and unrelated referees should be 
interviewed. 


Allows for a substitute referee if a near-relative referee is not available. 


Firearms Licence Vetting Guide (2011) 
New Zealand Police’s operational document for Vetting Officers 


Provides the forms for Vetting Officers to record answers given during interview and for 
the interviewee to sign. 


States referees should be interviewed separately and before the applicant. 


Does not deal with near-relative referee substitution. 
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Chapter 2: The regulation of semi-automatic firearms 


2.1 Overview 


In the terrorist attack on 15 March 2019, the individual used semi-automatic rifles with large 
capacity magazines. These weapons were configured to be military style semi-automatic 
firearms, which the individual was not entitled to possess with his standard firearms licence. 
Yet he was able to legally acquire both the rifles and the large capacity magazines. 


In this chapter we explain why this was so. For clarity, unless it is otherwise stated, 
we describe the relevant legislation and processes as they stood on 15 March 2019. 


2.2 The evolution of the regulation of semi-automatic firearms 


The Arms Act 1983 imposed particular limitations on the importation and possession of 


9 66 


pistols and “restricted weapons”. “Restricted weapons” are:4 


... any weapon, whether a firearm or not, declared by the Governor-General, by 
Order in Council made under s 4 of this Act, to be a restricted weapon. 


The Arms (Restricted Weapons and Specially Dangerous Airguns) Order 1984 declared a 
number of weapons to be restricted, including anti-tank projectors, grenade dischargers, 
Molotov cocktails, machine guns, sub-machine guns, explosive mines, mortars and rocket 
launchers. Semi-automatic firearms were not included. 


Further changes came about after a mass shooting in 1990 when a gunman used two 
semi-automatic firearms to kill 13 people in Aramoana, near Dunedin. In response to this 
event, the Arms Act was amended by the Arms Amendment Act 1992 to create restrictions 
on military style semi-automatic firearms, which were defined in a reasonably complex way. 


A semi-automatic firearm was a military style semi-automatic firearm if it was fitted with: 


a) amagazine capable of holding more than 15 .22 calibre rimfire cartridges or more than 
seven cartridges of any other kind; and/or 


b) amilitary pattern free-standing pistol grip; and/or 
c) a folding or telescopic butt; and/or 
d) bayonet lugs; and/or 


e) a flash suppressor. 





4 Arms Act 1983, section 2. 
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Figure 14: The five components of a military style semi-automatic firearm 


Folding or telescopic butt - Flash suppressor - protects 
shortens for ease of handling or the shooter from being blinded 
lengthens for greater accuracy by muzzle flash 


a 
Bayonet lugs - an attachment 
point for a long spike or 
thrusting knife 





Centrefire vs 


Rimfire cartridges 
Military pattern free- 





standing pistol grip - Bullet 
allows for better control High-capacity Carfidue case 
during rapid fire magazines - allows 
for continual feed of Bullet Propellant at 
ammunition without Cartridge case = 
reloading Propellant 
Primer Primer 3 
= 
7?) 
Centrefire a 
Rimfire Boxer Primer ” 


The Arms Amendment Act 1992 also introduced the following: 


a) A requirement for a licence endorsement (known as an E Endorsement) to possess 
military style semi-automatic firearms.® 


b) A requirement for permits to procure military style semi-automatic firearms, as was 
already the case for pistols and other restricted weapons. 


c) Import controls under a new section 18(2), requiring a permit to import military style 
semi-automatic firearms or parts. A permit could only be issued by the Commissioner 
of New Zealand Police and subject to the Commissioner being satisfied that there were 
“special reasons” why the firearm or parts “should be allowed into New Zealand”. The 
Commissioner could delegate permit approval powers to police officers of the rank of 
inspector or higher. 





5 Under new sections 30A and 30B of the Arms Act. 
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2.3 New Zealand Police practice in relation to military style 
semi-automatic firearms 


A restrictive approach was taken to the application of section 18(2) of the Arms Act. 
New Zealand Police policy was that “special reasons” to import a military style 
semi-automatic firearm or parts for such a firearm would be established if: 


The individual applying for the permit: 


a) seeks to possess the [military style semi-automatic firearm] as part of a collection, 
and demonstrate that it fits with and enhances an existing collection, or 


b) participates in an identifiable shooting discipline or sport at an incorporated sports 
club with rules encouraging the safe and legal use of firearms and a range certified for 
the shooting activity and intends to use the [military style semi-automatic firearm] 
inan event at that sports club, or 


c) wishes to use the [military style semi-automatic firearm] in a capacity equivalent to 
that described in section 29(2)(e) of the Arms Act 1983 (“theatrical purposes”), or 


d) wishes to replace an unsafe or unserviceable [military style semi-automatic firearm] 
or part thereof and offers a 1:1 surrender of the unsafe or unserviceable [military style 
semi-automatic firearm] or part of the [military style semi-automatic firearm], or 


e) requires the [military style semi-automatic firearm] for occupational purposes. 
For dealers seeking a section 18(2) permit, special reasons were: 


The dealer is importing the ... [military style semi-automatic firearm] ... as an agent 
for an individual who has a special reason for importing that item. 


or 
The dealer wishes to replace an unsafe or unserviceable [military style semi-automatic 
firearm] or part and offers a 1:1 unconditional surrender of the unsafe or unserviceable 


[military style semi-automatic firearm] or part. 


A similar approach was adopted for permits to procure. 
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2.4 Disputes about administration 


New Zealand Police’s administration of the legislative controls on military style 
semi-automatic firearms was contentious. Many in the firearms community did not see much 
sense in legislative restrictions that, in part, rested on the appearance of firearms rather than 
their functionality. The restrictive approach to the granting of permits to import military style 
semi-automatic firearms and associated parts was unpopular. Also unpopular was a change 
in New Zealand Police policy on what constituted a military pattern free-standing pistol grip. 


Some of these issues gave rise to litigation. The restrictive policy adopted by New Zealand 
Police to the granting of permits under section 18(2) was upheld in Clark v Commissioner 
of Police where the Court rejected the argument that a dealer’s wish to have stock on hand 
for resale was a special reason.® New Zealand Police, however, did not succeed in other 
litigation concerning: 


a) the interpretation of what constituted a military pattern free-standing pistol grip 
(where New Zealand Police’s interpretation was rejected);’ and 





b) whether a permit to procure was required to convert a semi-automatic firearm into a 
military style semi-automatic firearm (with the Court concluding that, contrary to the 
view of New Zealand Police, there was no need for such a permit).° 
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The Arms (Military Style Semi-automatic Firearms and Import Controls) Amendment Act 2012 
re-defined military style semi-automatic weapons by removing some of the problems with 
the previous definition. However, this change is not material to our inquiry. 


2.5 An ineffective legislative policy 


As events turned out, the section 18(2) requirement for a permit to import parts for military 
style semi-automatic firearms and the restrictive approach taken by New Zealand Police 
were not particularly effective in limiting the importation of large capacity magazines. This 
is because large capacity magazines can, at least in some instances, also be used with bolt 
action rifles. Large capacity magazines imported for such use were not subject to import 
control under section 18(2). Once in New Zealand, they were not subject to any restrictions 
in terms of sale, meaning that a purchaser was not required to hold even a standard firearms 
licence. So, someone could import large capacity magazines by saying they were to be used 
with bolt action rifles but fit them to semi-automatic firearms (rendering those firearms 
military style semi-automatic weapons) but without the need for a permit. 





® Clark v Commissioner of Police [2018] NZDC 2990. 
7 Lincoln v New Zealand Police HC Palmerston North CIV-2009-454-4753, 1 March 2010. 


8 Lincoln v Commissioner of Police [2013] NZHC 1813. 
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Chapter 3: The firearms licensing process 


3.1 Overview 


As at 15 March 2019, the Arms Act 1983 provided for three categories of licences and a range of 
endorsements authorising the licence holder to possess pistols, restricted weapons or military 
style semi-automatic firearms. With the exception of pistols, there was no limit on the number 
of firearms or amount of ammunition that a firearms licence holder may purchase. 


Figure 15: New Zealand firearms licence and endorsement types 
[==] Licences 
A Standard firearms licence - allows a person to have and use, without 


supervision, any type of firearm (except pistols, military style semi-automatic 
firearms and restricted weapons). 





D Dealer’s firearms licence - allows a person to sell and make firearms and 
airguns. Valid for one year and can only be used for one place of business. 





V Visitor’s firearms licence - allows a person visiting New Zealand for less than 
12 months to use firearms for hunting or competitions in New Zealand and to 
apply to have endorsements to use controlled firearms. 


f=] Endorsements 


B B Endorsement - to possess up to 12 pistols and use for target shooting and to be 
an active member of an approved pistol club recognised by the Commissioner of 
New Zealand Police. 





C C Endorsement - either: 
a) collector endorsement to collect pistols or restricted weapons; 


b) heirloom/memento endorsement to own pistols or restricted weapons with 
special significance as an heirloom or memento; 


c) theatrical endorsement to own pistols and restricted weapons for theatrical 
purposes; or 


d) museum endorsement to collect pistols or restricted weapons. 





E E Endorsement - to possess military style semi-automatic firearms. 





F F Endorsement - to own pistols and restricted weapons for hire or sale, including 
as an employee of a dealer. Usually issued alongside an E Endorsement to enable 
dealing in military style semi-automatics as well. 
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The individual was granted a firearms licence without endorsements on 16 November 2017. 
Throughout the report we will refer to his licence as a standard firearms licence. This is 
sometimes called an “A Category” licence. 


The standard firearms licence did not authorise the individual to possess pistols, restricted 
weapons or military style semi-automatic firearms - the types of firearms for which 
endorsements are required. Firearms that can lawfully be possessed by the holder of a 
standard firearms licence are sometimes referred to as “A Category firearms”. 


The purpose of this chapter is to describe the process, not evaluate it. An evaluation of 
the firearms licensing system, which includes the firearms licensing process, is provided in 
chapter 4 of this Part. 


In this chapter we outline the firearms licensing process for a standard firearms licence, with 
a primary focus on the application of the fit and proper person test. We will address: 


a) the legislative context; 

b) New Zealand Police policy and operational guidance; 

c) the people who administer the process; 

d) an overview of the process; and 

e) determining whether an applicant is a fit and proper person. 


At the end of the chapter we identify the steps in the process that are significant to our 
inquiry. 


3.2 The legislative context 


In this chapter, we discuss the legislative context as it was before 15 March 2019. At the 
time, the firearms licensing process was based on sections 23 and 24 of the Arms Act and 
regulations 14-16 of the Arms Regulations 1992. 
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Sections 23 and 24 of the Arms Act provided: 


23 Application for firearms licence 
(1) Any person who is of or over the age of 16 years may apply at an Arms Office to a member 
of the Police for a firearms licence. 


(2) Every application under subsection (1) shall be made on a form provided by a member of 
the Police. 


(3) A person who is the holder of a firearms licence may, before the expiration of that 
firearms licence, apply for a new firearms licence. 


24 Issue of firearms licence 


(1) Subject to subsection (2), a firearms licence shall be issued if the member of the Police 
to whom the application is made is satisfied that the applicant— 


(a) is of or over the age of 16 years; and 


(b) is a fit and proper person to be in possession of a firearm or airgun. 


(2) A firearms licence shall not be issued to a person if, in the opinion of a commissioned 
officer of Police, access to any firearm or airgun in the possession of that person is 
reasonably likely to be obtained by any person— 


(a) whose application for a firearms licence or for a permit under section 7 of the Arms 
Act 1958, or for a certificate of registration under section 9 of the Arms Act 1958 has 
been refused on the ground that he is not a fit and proper person to be in possession 
of a firearm or airgun; or 


(b) whose certificate of registration as the owner of a firearm has been revoked under 
section 10 of the Arms Act 1958 on the ground that he is not a fit and proper person 


to be in possession of a firearm; or 


(c) whose firearms licence has been revoked on the ground that he is not a fit and 
proper person to be in possession of a firearm or airgun; or 


(d) who, in the opinion of a commissioned officer of Police, is not a fit and proper person 
to be in possession of a firearm or airgun. 
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As at September 2017, when the individual initiated the licensing process, regulations 14, 15 
and 16 of the Arms Regulations provided: 


14 Applicants to undergo theoretical test 


Every applicant for a firearms licence shall, unless a commissioned officer of Police 
otherwise directs, — 


(a) undergo a course of training which is conducted by a member of the Police or a 
person approved for the purpose by a member of the Police and which is designed 
to teach the applicant to handle firearms safely; and 

(b) pass such theoretical tests as may be required to determine the applicant’s ability 


to handle firearms safely (being tests conducted by a member of the Police or a 
person approved for the purpose by a member of the Police). 


15 Supply of particulars for firearms licence 


(1) Every application for a firearms licence shall be in writing, and shall be signed by the 
applicant. 


(2) The application shall state— 
(a) the full name of the applicant; and 
(b) the date of birth of the applicant; and 
(c) the place of birth of the applicant; and 
(d) the address and occupation of the applicant; and 
(e) the place at which the applicant carries on his or her occupation; and 
(f) the name and address of a near relative of the applicant; and 
(g) the name and address of a person (not being a near relative of the applicant) of 


whom inquiries can be made about whether the applicant is a fit and proper person 
to be in possession of a firearm; and 
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(h) whether the applicant has been convicted of any offence, whether in New Zealand 
or any other country; and 


(i) whether the applicant has previously made application to be issued with a firearms 
licence whether in New Zealand or any other country and has been refused. 


16 Place of application 


(1) An applicant for a firearms licence shall attend in person at an Arms Office and shall 
complete at that Arms Office his or her application for a firearms licence. 


(2) The Arms Office at which the applicant attends shall be either— 
(a) the Arms Office nearest to the applicant’s place of employment; or 


(b) the Arms Office nearest to the applicant’s place of residence. 


Minor amendments were made to these regulations in January 2019. These provided that 
the regulation 14(b) tests could be practical, as well as theoretical, and cleared the way for 
applications to be made electronically. 


3.3 New Zealand Police policy and operational guidance 


The Arms Manual is the primary New Zealand Police policy document on the administration 
of the Arms Act. Sitting under it are the Master Vetting Guide, which provides training notes 
for firearms licensing staff, and the Firearms Licence Vetting Guide, an operational document 
that sets out questions that Vetting Officers should ask applicants and referees during 
interviews. It also provides the forms on which Vetting Officers record the answers given by 
applicants and referees. 


3.4 The people who administer the process 


Sections 23(2) and 24(1) of the Arms Act use the phrase “member of Police”. This is not 
restricted to those who are sworn police officers, but extends to all New Zealand Police 
employees. The licensing process is usually administered by non-sworn Police employees. 
This was the case for the individual’s application. 
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We outline below the roles of those involved in the decision to grant a firearms licence. 


Figure 16: Roles of those involved in the firearms licensing process 


District Arms Officer 


Manages firearms licensing process 
and grants licence if satisfied that the 
applicant is a fit and proper person 


Vetting Officer Licensing Clerk 


Conducts all interviews of applicant Receives applications for firearms 
and referees to determine whether an licences, provisionally assesses 
applicant is a fit and proper person referee suitability 
and checks the applicant’s storage and conducts initial background checks 
arrangements on the applicant and referees 





Under section 24 of the Arms Act, a licence can be approved by a non-sworn Police 
employee, such as a District Arms Officer, but can only be refused by a sworn police officer, 
with the rank of inspector or higher. In the event of a licence application being refused, there 
is a right of appeal to the District Court. 
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3.5 An overview of the process 


The steps towards obtaining a licence are as follows: 


Figure 17: How New Zealand Police process a firearms licence application 


1. Applicant completes and submits a paper application form 


The applicant signs a declaration on the form to confirm that the information provided 

is correct. The completed application with proof of payment of fee is presented to 

New Zealand Police. The applicant must also attend, and pass, a Firearms Safety Course 
developed by New Zealand Police and run by New Zealand Mountain Safety Council 
instructors. 


2. Licensing Clerk provisionally assesses application 


The Licensing Clerk provisionally assesses the suitability of nominated referees and 
conducts initial background checks. The Licensing Clerk searches New Zealand Police’s 
National Intelligence Application database for any relevant information about the 
applicant and referees. 


3. District Arms Officer assesses application for disqualifying factors 


The District Arms Officer receives the file and reviews the application and, if it is 
appropriate for further processing, liaises with Vetting Officers. 


4. Vetting Officer interviews referees 


The Vetting Officer interviews the referees following the process set out in the 
Firearms Licence Vetting Guide. 


5. Vetting Officer interviews applicant at home and conducts storage check 


The Vetting Officer interviews the applicant following the process set out in the 
Firearms Licence Vetting Guide. Interviews take place in the applicant’s home 
and the Vetting Officer checks for appropriate firearms storage. 


6. District Arms Officer reviews application for approval or refusal 


The District Arms Officer reviews the application and referee interviews and then approves 
the firearms licence application or refers it to a police officer with the rank of inspector or 
above with a recommendation that it be declined. 
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3.6 The significance of the fit and proper person test 


Under the Arms Act prior to 15 March 2019, a standard firearms licence lasted for ten years 
and permitted the holder to possess any firearm other than a pistol, a restricted weapon 
or a military style semi-automatic firearm. There was no firearms registry, meaning that 
there was no record of the number and type of firearms owned by the holder of a standard 
firearms licence. 


All of this meant that the application of the fit and proper person test was fundamental to the 
effective operation of the Arms Act. Despite some legislative changes since 15 March 2019, 
this remains the case. 


3.7. Whois a fit and proper person? 


The phrase fit and proper person is not defined in the Arms Act and, prior to amendments 
made after 15 March 2079, little legislative guidance was provided as to how the fit and 
proper person test should be applied. 


On the basis of earlier court decisions, factors a decision-maker might have taken into 
account prior to 15 March 2019 included: 


a) the applicant’s general character and temperament;° 
b) whether the applicant is a risk to themselves or others with firearms;"° 
c) gang membership (although this will not automatically rule out an applicant);" and 


d) previous convictions (although these will not automatically rule out an applicant). 


The Arms Manual defines a fit and proper person as a person of good character, who can be 
trusted to use firearms responsibly and will abide by the laws of New Zealand. It sets outa 
list of reasons why someone might not satisfy the test." These include having: 


a) been the subject of a protection order; 
b) shown no regard for the Arms Act or the Arms Regulations; 


c) been involved in substance abuse; 





° Police v Cottle [1986] 1 NZLR 268 (HC). 
"© Jenner v Police [2016] NZDC 4102. 


" See Innes v Police [2016] NZDC 4538. However, compare Fewtrell v Police [1997] 1 NZLR 444 (HC); and Mallasch v Police [2009] 
DCR 596 (DC). 

” Bush v Police [1991] DCR 385 (DC); Flynn v Police DC Christchurch ClV-2010-009-605, 7 October 2010; Fewtrell v Police, footnote 
11 above; Mallasch v Police, footnote 11 above; and Jenner v Police, footnote 10 above. 


3 New Zealand Police Arms Manual (Wellington, 2002) at paragraph 2.29(2). 
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d) committed a series of minor offences, or a serious offence, against the Arms Act, ora 
serious offence against any other Act; 


e) committed crimes involving violence or drugs; 


f) affiliations with a gang involved in committing violent offences or in conflict with 
another gang; 


g) past or present involvement in relationship disputes involving violence or threats of 
violence; and 


h) exhibited signs of mental illness or attempted to commit suicide or cause other injury 
to themselves. 


Not included are extreme political opinions, racism or any other beliefs. 


3.8 Information available to New Zealand Police from the National 
Intelligence Application and other sources 


Information about an applicant or referee can be accessed through the National Intelligence 
Application - an information database used by New Zealand Police to manage information 
relevant to operational policing. The database includes: 


a) driver’s licence details; 

b) driver demerit and suspension history; 
c) youth aid involvement; 

d) family violence incidents; 


e) notification alerts (for example, mental health, violence, gang associations, vehicles, 
locations, organisations); 


f) history reports (such as charges against the person and bail conditions); and 
g) convictions. 


It also includes details about those who hold firearms licences, which may be relevant in 
relation to referee checks. 


New Zealand Police may also conduct further checks, such as criminal history checks 
through the International Criminal Police Organization (INTERPOL). A medical certificate 
from the applicant’s general practitioner to certify the applicant’s mental stability may also 
be requested. 
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Overseas criminal history checks are limited and are not carried out routinely. Under 

its rules, the International Criminal Police Organization (INTERPOL) will only check an 
applicant’s overseas criminal convictions if that person is suspected of having committed 
an offence. New Zealand Police do not routinely ask applicants who have lived overseas to 
supply criminal history checks from other jurisdictions. This means identification of prior 
convictions relies on self-disclosure. 


Similar considerations apply to medical certificates, as they are only sought if the applicant 
or referee discloses a medical condition that might have an impact on the applicant’s mental 
or physical suitability to possess a firearm or they behaved at the interview in such a way as 
to suggest such a condition. 


3.9 Nomination and acceptance of referees 


Regulations and guidance on the nomination of referees are complex. In order to deal with 
this complexity, we set out the law and policy in substantial detail. 


Regulation 15(2)(f) of the Arms Regulations requires the applicant to provide “the name and 
address of a near relative of the applicant”. Regulation 15(2)(g) requires the nomination of 

a person who is not a near relative of the applicant “of whom inquiries can be made about 
whether the applicant is a fit and proper person”. We refer to both persons as the “referees”. 


Neither the Arms Act nor the Arms Regulations require the referees to be interviewed. The 
Master Vetting Guide stipulates that, for every application, the near-relative referee must be 
interviewed face-to-face. The other referee must be interviewed face-to-face, only in the 
case of first-time applicants. 


The Master Vetting Guide refers to the near-relative referee in this way: 


This is the person who lives with, and probably best knows, the applicant in a personal 
sense. Be prepared to interview any previous spouse/partner. 


Some applicants are unable to provide a near-relative referee who lives with them and can 
be interviewed in person. This is addressed by the Master Vetting Guide which, when dealing 
with the near-relative referee, provides: 


If the applicant does not have a spouse/partner/next of kin, or the next of kin does not live 
with the applicant, interview the person who lives with them, or a person who is likely to 
know them best in a personal sense. 
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The Master Vetting Guide thus provides for the substitution of the near-relative referee. 
In this respect, there is an apparent inconsistency with the Arms Manual and the Firearms 
Licence Vetting Guide, which indicate that a near-relative referee is a requirement. 


Common sense requires all documents to be read together. This is consistent with the Arms 
Manual, which provides that the Firearms Licence Vetting Guide and the Master Vetting Guide 
direct the vetting of applications. The front cover of the Firearms Licence Vetting Guide 
advises that “[b]efore conducting the vetting please ensure that you understand the 

Master Vetting Guide”. The District Arms Officer and the Licensing Clerk are responsible for 
the initial assessment of whether a near-relative referee can be dispensed with and replaced 
with an unrelated referee. When doing so, they are expected to act consistently with the 
Master Vetting Guide. 


What all of this means is that an applicant who nominates a near relative who is living 
overseas or unable to be interviewed in person is usually advised to nominate another referee 
“who is likely to know them best in a personal sense” and is living in New Zealand. 


3.10 Initial background checks of the applicant and referees 


Upon receipt of the application, the Licensing Clerk carries out basic National Intelligence 
Application checks as to the applicant’s suitability to hold a firearms licence and the 
appropriateness of the two referees. The Licensing Clerk creates a paper file that includes 
printouts of the checks and forwards it to the District Arms Officer. If the checks show that 
the applicant is not a fit and proper person, the application is put to a police officer with 
the rank of inspector or higher for refusal. If nothing of note arises from these checks, the 
relevant parts of the file are sent to Vetting Officers. 


Vetting Officers do not receive the National Intelligence Application printouts. Instead, if 
information arises from such checks that might be relevant to vetting, this is noted by the 
District Arms Officer in the paper file for discussion by Vetting Officers with applicants and/or 
referees. 


3.11 The interview process 


Vetting Officers are responsible for interviewing both the applicant and the referees as part of 
the application process. 


Vetting Officers receive the relevant parts of the firearms licence application file and arrange 
in-person interviews with the applicant and the two referees at their respective homes. 
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The Firearms Licence Vetting Guide states that referees should be interviewed separately 

and before the applicant is interviewed. The applicant must not be present during these 
interviews. Conducting the interviews in this order allows the Vetting Officer to build a better 
understanding of the applicant and, in particular, to explore with referees any points of 
interest that can later be discussed with the applicant. This order of interviews is not always 
followed as it depends on the availability of those being interviewed and other practical 
considerations. 


If the applicant and referees live in the same District, the same Vetting Officer will usually 


interview all of them, although this may not be possible due to staff availability. Where they 
do not all live in the same District, different Vetting Officers will be involved. 


3.12 Referee interviews 


The Firearms Licence Vetting Guide requires the Vetting Officer to ask for the referee’s 
personal details. If the referee holds a firearms licence the licence number is recorded. 


Questions to determine the nature of the relationship between the applicant and referee are 
included in the preliminary section. For the near-relative referee, the questions are: 


a) What is your relationship to the applicant? 

b) How long have you known the applicant? 

c) Do you live with the applicant? And, if so, how long? 

d) How would you describe this relationship? 

In the case of the other referee, the questions are: 

a) How long have you known the applicant? 

b) What is your relationship to [the] applicant? 

The Firearms Licence Vetting Guide is written on the premise that there is a near-relative 
referee. Beyond the general questions that we have set out, it does not provide a template 
for testing the depth of the relationship between the applicant and referee. In particular, 
there is no guidance for Vetting Officers as to how they should assess whether the referee 


knows the applicant sufficiently well to comment on whether they are a fit and proper person, 
even though that is the primary purpose of inquiring into the nature of the relationship. 
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The Firearms Licence Vetting Guide provides questions that focus on the applicant’s attitude 
towards firearms and any traits of the applicant (or anyone in the applicant’s household) that 
may be relevant to the safe use of firearms. If any issues are identified, such as substance 
misuse, mental health issues or previous convictions, further details are required. 


Finally, the referee is asked to comment on why they consider the applicant to be suitable to 
have firearms, if they would have concerns for the safety of any person if the applicant had 
access to firearms and any reason why New Zealand Police might not issue a firearms licence 
to the applicant. Vetting Officers are to look out for indications of a referee being afraid of, or 
coerced by, the applicant. 


There is space at the end of the referee section for the Vetting Officer to provide comments 
and to summarise the interview, including observations of the referee’s behaviour, 
demeanour and their home. 


Each referee initials the bottom of the pages of the Firearms Licence Vetting Guide where 
their answers have been recorded. Referees also fill in their names, the date and sign the 
Firearms Licence Vetting Guide declaring that the answers they gave are true and correct. 


3.13 Applicant interview 


A Vetting Officer interviews the applicant in person at their home and checks the security 
of storage arrangements to ensure that they meet the requirements of regulation 19 of the 
Arms Regulations. 


The applicant must show the Vetting Officer proof of having passed the Firearms Safety 
Course. 


The applicant’s interview is directed by the questions set out in the Firearms Licence 
Vetting Guide. 


The first section is aimed at establishing why the applicant is applying for a firearms 
licence. The applicant must provide the Vetting Officer with their reasons for wanting a 
firearms licence and where they intend to use firearms, their experience with firearms and 
firearms interests (such as target shooting), whether they are a member of a firearms club 
or association and the precautions to be taken if firearms are lent to others. 
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The personal history section of the interview addresses whether the applicant has been 
referred to a psychiatrist or psychologist, has come to police attention (including for drink 
driving or traffic convictions) or has ever been refused a firearms licence (in New Zealand 
or elsewhere). Any information that has arisen from the background checks (including any 
overseas inquiries) that is of concern will be put to the applicant for comment. 


There is a section in the Firearms Licence Vetting Guide addressing alcohol and drug use, 
including medication, and whether the applicant has attempted suicide or if they have had 
any adverse events in their life in the last 12 months. 


The applicant is asked the same questions as their referees regarding the details of people 
who have access to the household and if those people display any traits that may make them 
unsafe to have access to firearms. 


The last section attempts to identify the applicant’s attitudes towards firearms with questions 
similar to those asked of referees, including whether the applicant considers that they are 
suitable to have firearms and if they would have any concerns for the safety of any person if 
they had a firearm. 


The Vetting Officer will then make a recommendation as to whether the applicant should 
be issued a firearms licence based on the interviews and inspection. The Vetting Officer 
provides a short statement outlining the reasons for the conclusion reached. 


If the referees have been interviewed before the applicant, this information is available to the 
Vetting Officer when the recommendation is made. Ifa different Vetting Officer interviewed 
the referees, the Vetting Officer making the recommendation may talk to that Officer to get 

a better understanding of the referees and their comments on the applicant’s suitability to 
possess a firearm. 


The applicant’s complete file is then returned to the District Arms Officer in the District where 
the application was made. 


3.14 The decision of the District Arms Officer 


The District Arms Officer reviews the report of the Vetting Officer (or their reports if there was 
more than one) and will grant the licence if satisfied the applicant is a fit and proper person 
to possess firearms. If the District Arms Officer is not satisfied the applicant is a fit and 
proper person, the application is referred to a police officer of the rank of inspector or 

higher for decision under section 24(2) of the Arms Act. 
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3.15 Steps in the process that are of significance to our inquiry 


As we will explain, the individual initially put forward his sister Lauren Tarrant, who lived in 

Australia, as his near-relative referee and gaming friend (see Part 4, chapter 2), who lived in 
New Zealand, as his other referee. Lauren Tarrant was not acceptable as a referee because 
she could not be interviewed in person and she was not contacted. The individual’s gaming 
friend was substituted for her and gaming friend’s parent became the other referee. 


The steps in the process as it was applied to the individual that are of concern to us involve 
the substitution of gaming friend as the near-relative referee, the acceptance of gaming 
friend’s parent as the other referee, the fact that Lauren Tarrant was not contacted and the 
referee interviews. 


We discuss these issues in chapter 5 when we review in detail the process that was applied 
and in chapter 6 where we evaluate the adequacy of that process. 
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Chapter 4: The firearms licensing system - 
an evaluation 


4.1 The extent to which evaluation is called for 


In this chapter we provide an evaluation of the firearms licensing system with a particular 
focus on the firearms licensing process and the regulation of semi-automatic firearms. 
However, it should be noted that our Terms of Reference restricted us from inquiring into or 
making recommendations on “amendments to firearms legislation” as “the Government is 
separately pursuing this issue”. 


The government’s separate pursuit of this issue has led to significant changes to the 
regulation of semi-automatic firearms and the prohibition of certain types of ammunition 
and magazines following the 15 March 2019 terrorist attack. The Arms Legislation Act 2020 
introduced further substantial changes to the firearms licensing system. The amendments: 


a) substantially recast the approach to be taken to the fit and proper person test; 


b) provide mechanisms for health assessments to play a role in the licensing process; 





c) reduce the duration of firearms licences from ten to five years for first time applicants 
and limit the duration of firearms licences to five years for those who have previously had 
their licence revoked, surrendered or expired; 


d) provide for ongoing inspection of firearms and storage arrangements; and 
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e) provide explicitly for fees to be fixed on the basis of cost recovery. 


Our Terms of Reference precluded recommendations on the regulation of semi-automatic 
firearms and the legislative structure of the firearms licensing process. So it is not open to 
us to recommend legislative changes affecting the way in which the fit and proper person 
test is applied. On the other hand, we could make recommendations on the administration 
of this test by New Zealand Police. Complicating the situation is that any changes we 
recommend might be addressed by changes in New Zealand Police practice or legislatively, 
as demonstrated by recent amendments to the Arms Act 1983. 


The firearms licensing system is required to give effect to the legislative framework in which 
it operates. For the most part, the issues we have identified with the firearms licensing 
system (and which we discuss in this chapter) were recognised and understood by 

New Zealand Police before 15 March 2019 and have been addressed by legislation passed 
after 15 March 2019. 


Against this background the practical scope for recommendations is more limited than would 
otherwise be the case. 
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All of that said, some evaluation of the way in which the firearms licensing system operated 
prior to 15 March 2019 is necessary because: 


a) 


b) 


C) 


d) 


e) 


it provides an important part of the explanation for why the individual’s firearms licence 
application was granted and the context in which those who dealt with that application 
were acting; 


an understanding of why the firearms licensing process was less than ideal may provide 
some assistance for the future; 


the ease with which restrictions on military style semi-automatic firearms could be 
exploited explains why the individual was able to legally acquire the components of the 
military style semi-automatic rifles he used in the terrorist attack; 


more generally, the fact that known risks and deficiencies in the firearms licensing system 
were not addressed warrants mention; and 


finally, we consider that, despite the direction in our Terms of Reference, there remains 
scope for some recommendations. 


4.2 Overview of this chapter 


In the rest of this chapter, we discuss: 


a) 
b) 
C) 
d) 
e) 
f) 


8) 
h) 
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the general operation and scale of the firearms licensing system; 

the overall effectiveness of the firearms licensing system; 

the social and political context in which the firearms licensing system operates; 
resourcing; 

issues with administration; 


the limited guidance given by the Arms Manual, the Master Vetting Guide and the 
Firearms Licence Vetting Guide; 


the ease of obtaining a firearms licence; 
reviews, reports and commentary on the firearms licensing system; and 


our conclusions on the firearms licensing system. 


4.3 The general operation and scale of the firearms licensing system 


As at 31 October 2018, there were 248,764 current firearms licences, including standard, 
dealer and visitor licences. 


Firearms licensing is largely administered by New Zealand Police on a District by District 
basis, with the exception of certain statutory powers that are exercised within the Arms Act 
Service Delivery Group in Police National Headquarters. These exceptions are not material 
for present purposes. 


Records of legally-owned firearms were kept only for military style semi-automatic firearms, 
pistols and restricted weapons. These were based on permits to import and procure and 
were not part of a formal registry. There is no record of the total number of firearms in 

legal ownership in New Zealand and, of course, the number of illegally-owned firearms is 
unknown. There have been a range of estimates: 





a) In1997, the Thorp Report estimated the total number of civilian-owned firearms in 
New Zealand, including both legal and illegal firearms, to be between 700,000 and 
1,000,000. This included an estimated 20,000 to 30,000 military style semi-automatic 
firearms. 


b) In 2014, New Zealand Police estimated the total number of civilian-owned firearms to be 
around 1.2 million. 
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c) A 2018 report estimated that there were 1.212 million civilian owned firearms - 
approximately 2.6 firearms for every ten people. Of these, 65,837 were military style 
semi-automatic firearms, pistols and restricted weapons recorded as held by 9,722 
licensed owners."® Around two thirds of the 65,837 were pistols.” 


There are fewer licences than firearms, as many firearms licence holders own more than one 
firearm. Although the numbers are only rough estimates, dividing the number of firearms 
(approximately 1.2 million) by the number of licensees (approximately 250,000) suggests 
that licence holders, on average, own just under five firearms. This indicates that the number 
of firearms owned by the individual (six as at 15 March 2019) was not unusual within the 
firearms community. 





4 Sir Thomas Thorp KNZM, footnote 2 above at pages 27-28. 


8 Aaron Karp Estimating Civilian-held Firearms Numbers (Australian Department of Foreign Affairs and Trade, Australia, 2018). 
See also S Every-Palmer and others “The Christchurch mosque shooting, the media, and subsequent gun control reform in 
New Zealand: a descriptive analysis” (2020) Psychiatry, Psychology and Law at page 1; and Nathan Swinton A Turning Point for 
Firearms Regulation: Implications of Legislative and Operational Reforms in the Wake of the Christchurch Shootings (lan Axford 
(New Zealand) Fellowships in Public Policy, September 2019) at page 21. 

‘© New Zealand Police Official Information Act Disclosure IR-01-18-11101 (29 November 2018). 


New Zealand Police Official Information Act Disclosure IR-01-18-12383 (29 November 2018). 
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Figure 18: Firearms licences by District, number of firearms staff and new standard firearms 
licence applications granted and denied in 2017 
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4-4 The overall effectiveness of the firearms licensing system 


By international standards, New Zealand’s firearms licensing process is strict due to 

the requirements for referees, face-to-face interviews with applicants and referees and 
inspection of firearms storage arrangements. And, on the whole, before 15 March 2019 the 
licensing system appeared to have been reasonably successful, at least as measured by the 
limited number of its failures. 


There were 2,181 hospitalisations due to firearms-related injuries between 2000 and 2017, an 
average of 121 per year."® There were 867 firearms deaths from 2000 to 2015, an average of 
54 ayear. The most common cause of death by firearm was suicide, accounting for around 
40 deaths a year. Between 2010 and 2017 there were around seven homicides a year caused 
by firearms. Behind these statistics are a large number of incidents, all of which were serious 
and many tragic. That said, these are comparatively low figures, particularly allowing for 

the number of firearms in circulation, the availability of semi-automatic firearms and easily 
evadable controls in relation to military style semi-automatic firearms. 


4-5 The social and political context in which the firearms licensing 
system operates 


Over the last 30 years, firearms licensing and control in New Zealand has been controversial 
and has involved something of a cultural divide. Deficiencies in the firearms licensing system 
had been recognised in a number of reports and reviews. Changes to the firearms licensing 
system tend to involve additional expenses and inconvenience for, or restrictions on, firearms 
owners and are likely to attract their opposition. Given the number of firearms owners, their 
concerns are taken seriously by politicians. This, along with the perception that the licensing 
system was reasonably effective, contributed to a lack of political appetite for reform prior to 
15 March 2019. 


Licensed firearms owners engage closely with New Zealand Police. For some time 
relationships were difficult, as is apparent from issues (and litigation) involving New Zealand 
Police’s administration of the rules about military style semi-automatic firearms. There 
were also issues with the timeliness (or otherwise) of the processing of firearms licence 
applications. A response was the 2013 establishment of the Firearms Community Advisory 
Forum. Its purposes were to improve the relationship between the firearms community 

and New Zealand Police and, in particular, to provide input to New Zealand Police on 

policy relating to the Arms Act and the Arms Regulations 1992 and review and make 
recommendations for consideration by New Zealand Police on firearms-related matters. 





8 Marie Russell and Hera Cook Fact Sheet: Firearms in New Zealand (3 April 2019). 
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There was a sense that firearms licensing involves the delivery of a service for which 
licensed firearms owners are the customers. Consistent with this are an emphasis in the 
Key Performance Indicators for District Arms Officers on ensuring timely processing of 
applications and the 2017 establishment of the Arms Act Service Delivery Group within 
New Zealand Police. The two main objectives of the Arms Act Service Delivery Group are 
to improve the relationship with the firearms community and to improve how New Zealand 
Police administers the Arms Act. In doing so, the Arms Act Service Delivery Group aims 

to provide “a more customer-focused and efficient public service”. 


4.6 Resourcing 


The application fee for a standard firearms licence is $123.75 and the licence is valid for ten 
years. As at 15 March 2019, fees charged for firearms licences had not increased since 1999. 
The fee is Goods and Services Tax (GST) inclusive. So at the time it was fixed, it represented 
a fee of $110 and GST (at the then rate of 12.5 percent) of $13.75. When GST was increased to 
15 percent in 2010, the fee was not adjusted meaning that the fee excluding GST decreased 
from $110 to $107.60. 


Under the firearms licensing system, fee recovery is confined to applications for firearms 
licences, renewals, endorsements and consents for gun shows. There are many other 
services New Zealand Police provide as part of the firearms licensing system, such as 
granting permits to import, that are not subject to fee recovery. Approximately 80 percent of 
firearms licensing fee revenue derived by New Zealand Police comes from application fees for 
standard licences. 


New Zealand Police’s 2017-2018 annual report noted that in 2017-2018 the firearms licensing 
system cost approximately $14 million to run. In the same financial year, $3.63 million 

was received in firearms licence application fees, leaving New Zealand Police to meet the 
remaining $10.40 million cost from their budget. The same annual report states “[d]ue 

to increased demand in other Police priority areas”, fewer resources were “available for 
licensing activities in the 2017-2018 year”. 


The effect of this is that the more money spent on firearms licensing, the less New Zealand 
Police can spend on other areas of operations or projects. It would not be sensible for us 
to determine whether New Zealand Police “underspent” on firearms licensing because “too 
much” was spent on other areas, say family violence. What we can say is that the resources 
able to be committed to firearms licensing were constrained by the failure to increase the 
fees payable for firearms licence applications. Such fees are set by regulation and change 
would thus depend on a political decision leading to legislative action (in the form of an 
amendment to the Arms Regulations). 
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4.7. Issues with administration 


Prior to 1992, standard firearms licences were valid for the licence holder’s lifetime. 

The Arms Amendment Act 1992 reduced this to 10 years. The way this was implemented 
resulted in what New Zealand Police refer to as the “licensing bell curve”. New Zealand 
Police receive approximately 13,000 applications annually for two years, followed by a 
three-year period of approximately 47,000 applications annually, followed by another 
two-year period of 13,000 applications. The variability in licensing renewals creates a 
number of issues for New Zealand Police, including pressures on funding and a requirement 
to hire contract staff to cover the additional workload in the busy years. All of this plainly 
put considerable pressure on those administering the system. We note that the individual’s 
application was dealt with in a year of increased applications due to the licensing bell 
curve. For example, the Southern District - where the individual applied for his firearms 
licence - processed 5,737 firearms licence applications (including renewals) in 2017 

(as compared to 3,159 in 2018). 


Other administration issues frequently raised by those we spoke to were: 


a) Licensing processes are paper-based and require extensive double handling with 
consequent inefficiencies. 


b) District frearms staff are given limited initial training and, in recent years, no 
Ongoing training and current training standards are outdated and inconsistent across 
New Zealand Police. 


c) As the licensing system is operated at a District level, there are significant 
inconsistencies from District to District. 


We deal with each of these points in turn. 


The firearms licensing process is old-fashioned. It involves paper files, parts of which are 
sent by mail to Vetting Officers and then returned by mail to the District Arms Officer. There 
are associated requirements for stapling, unstapling and the use of sticky notes. Sucha 
system is inefficient for firearms licensing staff. As well, it is not susceptible to effective 
monitoring and performance review. These inefficiencies meant District firearms staff spent a 
disproportionate amount of time on administrative tasks, at the expense of time available to 
assess the merits of firearms licence applications. 
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In dealing with interviews of applicants and referees, the Firearms Licence Vetting Guide is 
prescriptive in terms of the questions that must be asked. But the Arms Manual states: 


The points set out in the formats are not exhaustive and vetters are encouraged to ask 
whatever extra questions they consider are appropriate in each case. There is a danger 
of interviews becoming stereotyped. 


That is sensible advice. However, licensing staff are not trained to go beyond what is in the 
Firearms Licence Vetting Guide. There are no training opportunities to learn how to better 
assess difficult and marginal applications. Licensing staff are not trained to say “no” to 
applications. There was no system of performance review and no mechanism for identifying 
Vetting Officers whose interviewing practice had become entirely controlled by the Firearms 
Licence Vetting Guide or, to use the language of the Arms Manual, “stereotyped”. 


The last issue concerning inconsistencies in the process can be demonstrated by applicants’ 
perceptions of the intensity of the vetting process and differing approaches to the 
substitution of a near-relative referee. 


Some of those who made submissions to us described intense and exhaustive vetting 
processes, involving interviews extending over several hours, questioning about political 
and social views, up to six referees being required, medical certificates being sought and 
inquiries made in other countries. Other submitters, however, described processes that 
were light and in the nature of rubber-stamping. 


We asked all of the District Arms Officers in New Zealand to describe the process in 
their District for determining whether an unrelated person who is to be substituted for 
a near-relative referee knows the applicant well enough to be suitable as a referee. The 
inconsistencies in practice are demonstrated by the answers below: 


a) One District Arms Officer told us that in their District the substituted referee must have 
known the applicant for at least two years. 


b) One District Arms Officer told us that the substituted referee must have known the 
applicant for a sustained period - generally three to five years. 


c) One District Arms Officer told us that it “would be expected that the referee nominated 
has known the applicant for a minimum of 12 to 18 months along with having had ongoing 
and regular contact”. 
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d) One District Arms Officer told us that it is “[New Zealand] Police policy that the 
applicant is to provide a next of kin referee in New Zealand ... [and if] the applicant 
has no next of kin in New Zealand and [New Zealand] Police have no evidence to 
dispute this, then [New Zealand] Police are required to accept the referee provide[d] 
by the applicant”. 


e) One District Arms Officer told us that, in their District, if there is no near relative the 
applicant is required to nominate two additional unrelated referees. 


f) One District Arms Officer told us that it “would typically not be known until the interview 
was completed”, when the District Arms Officer would review the responses to the vetting 
questions (including the length of time the referee had known the applicant) to assess 
whether the referee knew the applicant well enough to provide reassurance that the 
applicant was a fit and proper person. 


4.8 Limited guidance given by the Arms Manual, the Master Vetting 
Guide and the Firearms Licence Vetting Guide 


New Zealand Police policy and guidance were tailored to an applicant who had spent all, or 
a considerable portion, of their life in New Zealand and could provide a near-relative referee 
and another person who both knew the applicant well and could be interviewed in person. 


It was recognised that not every applicant would fit this model. To allow for this, a 
near-relative referee could be substituted with another referee. But there was no attention 
focused on: 


a) whether it would be appropriate to conduct a phone or video interview with a near 
relative who lived overseas; 


b) what should happen if a substitute for a near-relative referee, who knew the applicant 
“best in a personal sense”, did not know the applicant very well; and 


c) the questions that should be asked of the substituted referee to test the depth of the 
relationship. 


As we have explained, one of the purposes of interviewing a referee about their relationship 
with the applicant is to establish whether the referee knows the applicant well enough 

to adequately comment on whether the applicant is a fit and proper person to possess 

a firearm. Unfortunately, the Arms Manual, the Master Vetting Guide and the Firearms 
Licence Vetting Guide do not identify that this is the primary purpose of that part of the 
vetting exercise. 
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4.9 The ease of obtaining a firearms licence 


A number of people told us that New Zealand Police tend to grant a firearms licence unless 
there are strong reasons to decline. The suggestion was that it is too easy to obtaina 
firearms licence. In support of this, reliance is placed on the limited number of refusals. 
The information we have been provided shows that only 2.1 percent of all new applications 
for standard firearms licences between 2014 and 2018 were declined by New Zealand Police. 


Under the Arms Act, a firearms licence is not to be granted unless the relevant member 

of New Zealand Police is “satisfied that the applicant is a fit and proper person to be in 
possession of a firearm”. Obviously, it is for the applicant to satisfy the fit and proper person 
test. There are, however, some complicating factors: 


a) 


b) 


fo) 


As noted above, a non-sworn member of Police can grant a firearms licence but only 

a police officer of the rank of inspector or above may decline one. For those who are 
working in the system, this might be taken to suggest that refusal of a firearms licence 
is more significant than a grant and, perhaps, that applications are to be granted unless 
there is good reason not to. 


There is a practical, if not legal, requirement for administrative decisions, particularly 
those that are able to be appealed, to be supported by reasons." 


If an applicant asserts good character, is supported by referees and has no disqualifying 
factors on their National Intelligence Application profile (such as a history of family 
violence), a police officer of the rank of inspector or above may have found it difficult 

to refuse a firearms licence based on the fit and proper person test. One reason could 
be insufficient evidence from an applicant - for instance, in the case of an applicant 
who had recently arrived in New Zealand. However, New Zealand Police policy and 
operational guidance were of limited assistance on this point. 





9 We say “practical” requirement because there is no general obligation to provide reasons in New Zealand. See R v Awatere [1982] 
1 NZLR 644 (CA); and Lewis v Wilson & Horton [2000] 3 NZLR 546 (CA). The Supreme Court declined to revisit this position in 
Manukau Golf Club Inc v Shoye Venture Ltd [2012] NZSC 109, [2013] 1 NZLR 285. See Manukau Golf Club Inc v Shoye Venture Ltd 
[2012] NZSC Trans 14 at pages 2-4 and 14-20. For an analysis of the requirement to give reasons in a judge-alone trial in criminal 
proceedings, see Sena v Police [2019] NZSC 55, [2019] 1 NZLR 575. 
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d) Adding to this is the case law on firearms licence refusals and revocations. Under 
section 62 of the Arms Act there was a right of appeal to the District Court against the 
refusal or revocation of a firearms licence. A number of the judgments dealing with the 
appeals suggested New Zealand Police had adopted an approach to the fit and proper 
person test that was too strict.2° These cases generally indicate judicial tolerance for 
granting or not revoking a firearms licence despite applicants or firearms licence holders 
(as the case may be) having sometimes serious convictions.” 


In addition, we would note that the low level of refusals - 2.1 percent of all new applications 
for standard licences - is not necessarily indicative of a lax approach to granting firearms 
licences. The firearms licensing process has a gate-keeping role in that applicants who are 
unlikely to be successful are unlikely to apply. A potential applicant who has, for example, 

a long history of criminal offending is unlikely to waste the application fee knowing that their 
application will likely be declined. 


We are not in a position to assess whether it has been “too easy” to obtain a firearms licence. 
This would require extensive analysis of a range of material held by New Zealand Police, 
including application files and the subsequent conduct of those who were granted firearms 
licences. The licensing process has changed since 15 March 2019. So, the cost of such an 
exercise in terms of time and money would heavily outweigh the possible benefits. 
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4.10 Reviews, reports and commentary on the firearms 
licensing system 


The 1997 Thorp Report concluded there was “a need for radical reform of the firearms laws”.” 
It also noted that the distinction between military style semi-automatic firearms and 

other semi-automatic firearms had “proved to be problematic at best since 1992” and 

that “the potential for evasion of the law is too great”.* Its 60 recommendations included 
the following proposals: 


a) Military style semi-automatic firearms should be banned (with an exemption for people 
working in animal pest control, if no other firearm would be equally effective for their 
particular business). 





2° For a sample of cases where the decision to refuse or revoke a firearms licence (made by a police officer with the rank of inspector 
or higher) has been overturned on appeal, see Jenner v Police, footnote 10 above; Police v Cottle, footnote 9 above; Flynn v Police, 
footnote 12 above; Mallasch v Police, footnote 11 above; Dobbs v Police [1992] DCR 650 (DC); Gadsby v Police DC Masterton ClV- 
2012-035-000064, 11 May 2012; Hubber v New Zealand Police DC Invercargill CIV 2012-025-000501, 8 July 2013; Hore v Police 
[2017] NZDC 5263; [Park] v Police [2018] NZDC 5946; Lincoln v Police DC Palmerston North 281-95, 24 November 1995; Twining v 
Holland DC Pukekohe MA 338-91, 12 August 1992; O’Loughlin v Police [2001] DCR 488 (DC); De Pina v New Zealand Police 

DC Hamilton CIV-2006-019-000459, 25 August 2006; and Carruthers v New Zealand Police DC Opotiki CRI-2011-047-000050, 

12 April 2012. 

See, for example, Jenner v Police, footnote 10 above, where the applicant had 17 prior convictions for breaches of the Arms Act. 


z 


» Sir Thomas Thorp KNZM, footnote 2 above at page 237. 
23 Sir Thomas Thorp KNZM, footnote 2 above at page 137. 
24 Sir Thomas Thorp KNZM, footnote 2 above at pages 239-242. 
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b) All other style semi-automatic firearms should be limited to a magazine capacity of 
seven cartridges. 


c) The licensing system should be replaced by a combined licensing and registration system 
based on three-year firearm-specific licences. 


d) There should be an attempt to define, in consultation with representatives of 
New Zealand Police, psychiatrists, firearms users and family violence workers, a list 
of characteristics likely to make a person unsuitable to possess firearms. The list 
would be used to guide Vetting Officers. 


e) People who commit certain offences should be disqualified from holding a firearms 
licence for a set period. 


f) Two referees should be consulted as part of the vetting process (in all but exceptional 
cases). 


g) Ifthere are concerns about the suitability of a firearms licence applicant, New Zealand 
Police should consult an independent referee. 


h) An applicant’s mental health information should be able to be shared by health 
professionals with New Zealand Police, if it would be relevant to a firearms licensing 
decision. 


The Thorp Report also recommended that an independent Firearms Authority be established 
to manage implementation of the Report’s recommendations and to be responsible for the 
administration of firearms control for either five years or on a permanent basis.* This was to 
avoid New Zealand Police’s “ingrained attitudes” in relation to firearms control, which were 
seen as possibly preventing the recommendations being successfully implemented.” 


The Thorp Report had little immediate impact. Following the report, New Zealand Police 
indicated that many of the recommendations were already part of their practices.?”? Other 
recommendations were not accepted because they had “significant financial, policy or 
legislative implications for Government”.*® Tighter control of semi-automatic firearms did not 
eventuate. An attempt in 1999 to introduce a firearms register” did not succeed.*° Similarly, 
a separate attempt to establish an independent Firearms Authority,®' as proposed in the 
Thorp Report, failed.* 





5 Sir Thomas Thorp KNZM, footnote 2 above at page 231. 

26 Sir Thomas Thorp KNZM, footnote 2 above at page 225. 

27 Arms Amendment Bill (No 3) 2005 (248-1) (explanatory note) at page 2. 

8 Arms Amendment Bill (No 3) 2005 (248-1) (explanatory note) at page 2. 

29 Arms Amendment Bill (No 2) 1999 (312-1). 

3° Arms Amendment Bill (No 3) 2005 (248-1) (explanatory note) at page 2. 

31 Firearms Authority Bill 1999 (290-1). 

3 New Zealand Parliamentary Debates (30 June 1999) volume 578 at page 885. 
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Prior to 15 March 2019, there were other reviews or commentary in relation to the firearms 
licensing system. In particular, a report produced in 2011 by the Combined Threat 
Assessment Group titled Availability of Firearms in New Zealand to Terrorists, Violent 
Extremists and Acutely Disaffected Persons, two New Zealand Police assessments in 2014 
The Right-wing in New Zealand: Myth vs Reality and Domestic Extremism: Unlikely but 

not out of the question, a comprehensive review carried out by New Zealand Police of the 
management and administration of firearms that was presented to New Zealand Police’s 
Executive in May 2015, a 2017 Report of the Law and Order Select Committee of Parliament 
Inquiry into issues relating to the illegal possession of firearms in New Zealand and the 2017 
New Zealand Police Briefing to the Incoming Minister. 


The assessments by the Combined Threat Assessment Group and New Zealand Police 

are discussed in more detail in Part 8, chapter 4. For present purposes, we note that the 
Combined Threat Assessment Group identified that a terrorist or violent extremist could 
legally acquire firearms, including military style semi-automatic firearms, for use in an 
attack. In addition, New Zealand Police in their 2014 assessments noted the propensity for 
right-wing extremists to acquire and use firearms. They also concluded that the relative ease 
of access to semi-automatic firearms in New Zealand meant that a lone actor terrorist attack 
remained a possibility. 





The other documents referred to above cover much of the same ground in relation to the 
firearms licensing system as we have, including the ineffective regulation of semi-automatic 
firearms and issues with the firearms licensing process. 
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In June 2017, New Zealand Police established the Arms Act Service Delivery Group. The three 
key areas of opportunity and focus for the Arms Act Service Delivery Group were: 


a) the need for consistency in how firearms administration is undertaken within and across 
Districts, including staff training and development of national standards; 


b) better and more frequent communication and engagement between New Zealand Police 
and the firearms community; and 


c) the introduction of digital options and automation to reflect an increasingly digital 
community, while retaining paper-based options for those who cannot, or prefer not to, 
use digital channels. 


The Arms Act Service Delivery Group implemented some changes to the firearms licensing 
process. For example, in March 2018, a centralised team responsible for granting import 
permits was established to ensure consistency across the different Districts and, in July 2018, 
the Firearms Safety Course required to be undertaken by first time applicants was changed 
to include a practical component. As well, the Arms Regulations were changed to allow 
electronic filing of applications. 
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In November 2018, the Arms Act Service Delivery Group presented a paper to 
New Zealand Police’s Senior Leadership Team titled Proposal to change the management 
and administration of Arms Act. It proposed: 


a) establishing a service centre model with administration in a central location, and 
dedicated Arms Officers in Districts; 


b) managing all firearms administration costs from a single cost centre and enabling 
(over time) full cost recovery; 


c) providing dedicated firearms training and review resources to ensure New Zealand Police 
employees have the skills and knowledge to create trust and confidence in New Zealand 
Police across the country; 


d) freeing up senior leaders’ time from administrative work (licence revocation preparation 
work as an example) to concentrate on staff management and freeing up District Arms 
Officers to interact with the community rather than sitting at their desks; 


e) building a modern online application service with workflow and graduated response 
processing to give a faster and easier application process with no loss of rigour; and 


f) initiating proactive reviews of firearms community members supported by a robust and 
consistent revocation process. 


The paper was largely endorsed by New Zealand Police’s Senior Leadership Team. 


Beginning in June 2018, the Arms Act Service Delivery Group met with firearms staff, 
members of the firearms community and iwi representatives across New Zealand to discuss 
the firearms licensing process. On 29 January 2019, the Arms Act Service Delivery Group 
produced a consultation document, based on its nationwide discussions, on proposed 
changes to the operating model and organisational structure for the administration of 

the Arms Act. The results of the internal consultation were due to be announced in early 
April 2019. This was postponed following the terrorist attack on 15 March 2019. 
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4.11 Concluding comments on the firearms licensing system 


How semi-automatic firearms ought to be controlled is a matter of legislative judgement. 
For this reason, we take the balance struck by Parliament in 1992 as our starting point. 
Under this balance, a person holding a standard firearms licence could acquire and possess 
a semi-automatic firearm providing it lacked certain features and was not fitted with a 

large capacity magazine. A firearms licence holder required an E Endorsement to lawfully 
acquire and possess a semi-automatic firearm with a large capacity magazine. But because 
large capacity magazines could be lawfully acquired without producing a standard firearms 
licence, let alone one with an E Endorsement, these restrictions were easily gamed. 

And more generally, the policy of the 1992 amendments of limiting the number of military 
style semi-automatic firearms in New Zealand through import controls and the permit to 
procure requirement had been ineffective. 


That the distinction between military style semi-automatic firearms and other 
semi-automatic firearms was “problematic” and there was the “potential for evasion” 
were recognised in the 1997 Thorp Report, more than 20 years before the events of 

15 March 2019. And the potential for a terrorist to use semi-automatic firearms was 
explicitly recognised in 2011 by the Combined Threat Assessment Group and in 2014 by 
New Zealand Police assessments. 


As at 15 March 2019, the firearms licence application fee was $123.75, a level at which it had 
been fixed since 1999. Under administrative law principles, revenue from fees charged sets 
a practical base for the funding of the operation of the firearms licensing system. In other 
words, New Zealand Police could not spend less on firearms licensing than they charged. 

But the firearms licensing system cost New Zealand Police far more than the revenue it 
produced, which constrained the resources that were devoted to firearms licensing. 

So, Vote Police money (funded by the taxpayer) subsidised the administration of the firearms 
licensing process. Cost recovery was far from complete. In the 2017-2018 year recoveries 
were $3.63 million against costs of $14 million. 


The operation of the firearms licensing process was constrained by three external factors: 
a) the resources available; 


b) the structure of section 24 of the Arms Act, which created different decision paths for 
granting and refusing licence applications; and 


c) the drift of the District Court judgments that were in favour of those challenging refusals 
or revocations of firearms licences. 
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The firearms licensing process was further affected by the following factors: 
a) Its paper-based nature. 


b) The absence of training and performance monitoring of firearms licensing staff 
responsible for administering the process. 


c) A failure to ensure that the guidance given by policy and operational documents 
addressed more than the typical applicants who had lived their lives in New Zealand and 
had backgrounds that could be easily checked. As a result there was a lack of coherent 
guidance as to how to deal with those who had only recently come to New Zealand. 
There was no policy requiring such applicants to produce their criminal history reports 
from home jurisdictions and no specific guidance to licensing staff on how to apply 
referee requirements where a near-relative referee could not be interviewed in person. 


The combined limitations in the guidance provided by the Arms Manual, the Master Vetting 
Guide and the Firearms Licence Vetting Guide, and the lack of training, meant that those 
who administered the firearms licensing process were not well-placed to form and apply 
evaluative judgements in marginal cases. As we will explain in chapter 6 of this Part, this is 
illustrated by the way in which the individual’s licence application was handled. 
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Chapter 5: The process by which the individual 
obtained a firearms licence 


5.1. Overview 


In this chapter we discuss the steps in the firearms licensing process that resulted in the 
individual being granted a firearms licence. Our account is purely descriptive. An evaluation 
of the adequacy of the process is provided in chapter 6 of this Part. 


We held a hearing with the firearms licensing staff from New Zealand Police who dealt with 
the individual’s firearms licence application. The hearing involved separately interviewing 
each of the firearms staff (under oath or affirmation) on the same day. The purpose of 

the hearing was to develop a better understanding of the process by which the individual 
obtained a firearms licence and to identify any issues with the process that was followed. 


5.2 The application 


On 1 September 2017, the individual took the first step towards obtaining a firearms licence 
by paying the application fee. This was only 15 days after he arrived in New Zealand. 

Four days later, on 5 September 2017, he undertook and passed the then required theoretical 
Firearms Safety Course. 


We considered producing extracts from the individual’s application (as we have for the 
vetting interview records) but that form consists primarily of identifying details that would 
have to be redacted. Redacted in this way the form would contain no useful information 
that goes beyond the description that now follows. 


On his application, the individual identified his sister Lauren Tarrant (along with her 
Australian address) and gaming friend as his referees. Upon receipt of the application, the 
Licensing Clerk for Dunedin spoke to him by phone, telling him that because his sister lived 
in Australia and could not be interviewed face-to-face, he would need to provide another 
referee. 


The individual subsequently nominated gaming friend to replace his sister and gaming 
friend’s parent to be his other referee. The Licensing Clerk drew a line through Lauren 
Tarrant’s details on the application form and an arrow from gaming friend’s details to the 
space where Lauren Tarrant’s details had been recorded and noted gaming friend’s parent 
as his second referee. A sticky note was attached to the front of the individual’s application 
form by the Licensing Clerk indicating that gaming friend’s parent would be the “new 
unrelated referee”. The effect of the form as amended was that gaming friend was treated 
as the near-relative referee. 
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When giving evidence to us, the Licensing Clerk did not remember the details of the 
interactions with the individual but was reasonably confident that they had asked the 
individual how long he had known gaming friend. This would have been in accordance 
with the usual process in relation to referee substitution. 


The application form recorded the details of both referees, with the address of the two 
referees being the same and located in Waikato. It also described the relationship between 
the individual and both referees as “friend”. 


Other information provided by the individual on his application form included that he was 
unemployed and he was born in Australia. 


Having provisionally accepted the referees as suitable, the Licensing Clerk entered the 
individual’s application into New Zealand Police’s National Intelligence Application database 
on 19 September 2017. The Licensing Clerk completed the National Intelligence Application 
checks on the individual and the two referees and placed the results on the licence 
application file. 


Gaming friend and their parent both held firearms licences with B and E Endorsements. 

This entitled them to possess pistols and military style semi-automatic firearms and 
indicated that they had already been subject to New Zealand Police vetting that was more 
extensive than that required for the standard firearms licence the individual was applying for. 


The individual’s National Intelligence Application printout contained minimal information. 
He had no criminal history and no known criminal associates. The only additional 
information on his National Intelligence Application record, besides his name and contact 
details, related to his car accident in 2013 (see Part 4: The terrorist). 


The individual’s contact details recorded two home addresses, the first being an address 

in Grafton, Australia. This was the address given by the individual when his details were 
recorded by a New Zealand Police Officer who attended the car accident in 2013. The second 
was the individual’s Dunedin address. 


Gaming friend was known to New Zealand Police and New Zealand Customs Service due to 
their attempted importation of an offensive weapon and firearm parts without the necessary 
permits to import. This information was on their National Intelligence Application printout 
when the Firearms Licensing Clerk reviewed it. New Zealand Customs Service’s records 
note the following: 
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a) In May 2014, gaming friend tried to import a knuckleduster knife. Knuckledusters are 
considered offensive weapons and require a New Zealand Police permit to import them. 
The item was intercepted by New Zealand Customs Service at the border. New Zealand 
Customs Service officers contacted New Zealand Police who confirmed that gaming 
friend did not have the necessary permit. The knuckleduster knife was, therefore, seized. 


b) In December 2015, gaming friend tried to import four firearm parts - one cheek riser for 
a Magpul CTR/MOE stock, one AK47 Nato US stock, one AR15 buttstock extension tube 
and one AKM4 stock adapter for a collapsible stock. The items were intercepted by 
New Zealand Customs Service at the border. As gaming friend did not have the required 
import permit, the items were seized. 


Following the December 2015 incident, the District Arms Officer in Waikato contacted gaming 
friend, gave them a verbal warning and told them that they would not receive the items. 


The National Intelligence Application printout for gaming friend’s parent showed they 
had four convictions: 





a) refusing an officer’s request to undergo an evidential blood test on 14 July 1989; 


b) producing a logbook* that contained false particulars on 14 July 1989; 
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c) producing a logbook that omitted a material particular on 14 July 1989; and 


d) driving with an excess proportion of alcohol in their breath on 15 March 1991. 


The Licensing Clerk and former District Arms Officer both gave evidence that, although they 
could not remember the specifics of the application, they would have discussed between 
themselves the appropriateness of gaming friend and their parent as referees. Neither 
regarded the information on the National Intelligence Application forms as disqualifying 
them from being referees. As noted above, gaming friend and their parent were firearms 
licence holders with B and E Endorsements. The incidents recorded in the National 
Intelligence Application had not been serious enough to prevent gaming friend and their 
parent obtaining, or to result in them losing, their endorsements or their firearms licences. 
That they held licences and endorsements was seen as outweighing the incidents recorded 
on the National Intelligence Application. 


Being satisfied that gaming friend and their parent were appropriate referees, and there 
being no information on the individual’s National Intelligence Application to disqualify 
him from applying for a firearms licence, the former District Arms Officer arranged for the 
relevant parts of the file to be sent to Vetting Officers. 





33 Logbooks are required to be filled out by drivers of certain vehicles (for example, vehicles that are used in a transport service). 
These logbooks must contain certain details, such as start and finish times for all periods of work. It is an offence to produce a 
logbook that omits one of the required details or to produce a logbook that contains false details. 
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The individual and his referees lived in different Districts. This required different Vetting 
Officers to conduct the interviews. A part file was sent to each Vetting Officer, containing the 
part of the Firearms Licence Vetting Guide relevant to the interview being conducted by the 
particular Vetting Officer. The former District Arms Officer did not direct the Vetting Officers 
to make particular inquiry (that is beyond what is provided for in the Firearms Licence Vetting 
Guide) into the relationships between the individual and his referees. 


The individual was interviewed at his home by a Dunedin-based Vetting Officer (Dunedin 
Vetting Officer) on 4 October 2017. He told the Dunedin Vetting Officer that he had previously 
resided in New South Wales, had moved to his Somerville Street address five weeks earlier 
and was unemployed. 


Figure 19: Extract 1 from the notes of the individual's vetting interview 


Tell me how long you 2 i 


have been at your present r = 
address, and what was your AJ ay or. DW? = G 


. ox 
previous address? 
= SS ee 


Tell me how long you have a, ee 2 ay ASC Ps : (. 4 TRO L €€ — 
been in your job and what d - : 
you do? cf Youve ( { a_at “Ls Lb,” 


lowlinsy Ca keg: 


Unemployed - Have been travelling and now looking for work. 


When asked why he wanted a firearms licence, the individual said that he wanted it for 
hunting, leisure, target shooting and sport. 


Figure 20: Extract 2 from the notes of the individual’s vetting interview 


Tell me your reasons for /. | bie. C . My 2 Je an 


wanting a licence 
Per Ge 2 { pe s ee Cc \ > 


Hunting & leisure. Target & sport. 
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NO 
NO 


The individual told the Dunedin Vetting Officer that he intended to use firearms at rifle and 
pistol clubs and “hunting locally”. He described his experience with firearms as consisting of 
going to “the range with a friend a few times”. The individual said he was interested in using 
firearms for the purposes of “target shooting”. 


Figure 21: Extract 3 from the notes of the individual’s vetting interview 


Where d intend t a ; D 3 a 5 ‘ 
Hem end to use AL ’ The re (eo A_e- #2 CS Ly ( 
ctu é < 


Fate oy (a Ce US. 


A 


= 
Tell me about your t aT 5 os 2 aon A O 
experience with firearms? e 
Poe ot atc " Ou RRC ARCS 


interests, e.g. collecting, 
target shooting etc? 


Tell me about your firearm Weagek Dv a 5 \ = 


At the rifle and pistol clubs. 
Hunting locally. 
To the range with a friend a few times. 


Target shooting. 


He also stated that he had no psychological conditions, substance abuse issues or head 
injuries and was not using any medication. 
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Figure 22: Extract 4 from the notes of the individual's vetting interview 


Do you, or anyone in your household, or anyone who regularly visits have (or has had in the past) any or tne rollp 











elem sete) es 
3 1 (odes Ole a duced 





(including domestic violence) 
13. Any head injury requiring treatment 
14. Fits, dizziness, blackouts 
15. Any convictions 


16. Any other involvement with police 


AS BSS SSNS 


17. Associations with any gang, criminal group/individual =| { 
or activity ; 


SEER EERE EEE EE HEE E EERE TEETER EEE EEE EEE EEE HEHEHE EEE EH EEE EEE E EEE EEE HEHEHE HEHEHE EEE EE HEHE EEE E EEE E EE EES 


1. Psychological or psychiatric disorder or illness of any kind | ( = 9 . : 
: 2. Anxiety 7. \ : 
3. Depression yf LJ " : 
4. — Stress disorder \ : 
: 5. Post traumatic reactions 4 a] a ; 
: 6. Substance misuse (including alcohol) , : 
> 7. On any medication 4) ‘ 3 : 
: 8. Disordered interpersonal relationships \ : 
: 9. Aggression | < ) : 
; 10. Emotional problems \ : 
: 11. Mental breakdown of any kind r : 
: 12. Exhibited behaviours suggesting anger or violence : 


The individual said he considered himself to be suitable to have firearms because he was “a 
responsible person” and he did not have any concerns for the safety of any person if he had 
firearms. He said he held this view because did not “have any [enemies]”. The individual did 
not know of any other relevant information that may have impacted the decision to issue him 
with a firearms licence. 
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Figure 23: Extract 5 from the notes of the individual’s vetting interview 


Applicant’s attitude towards firearms 
Do you consider that you are suitable to have/have access to firearms? es No 
Why do you hold this view? hee Oo re 2496 ee 
~ C30! 
Would you have any concerns for the safety of any person if you had a firearm(s)? Yes VNo 


Why do you hold this view? are Fito T Le ANS eC Ak gk Fs 


Is there any other information which may have bearing upon the decision by police to issue you Yes No 


with a firearms licence? 


Comment/details: 





I’m a responsible person. 
I don’t have any [enemies]. 
N/A [not applicable]. 


He claimed to have “now met people at pistol and rifle clubs”. In their notes, the Dunedin 
Vetting Officer recorded that the individual “did not show any unusual behaviour during the 
visit or interview”. 
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Figure 24: Extract 6 the notes of the individual’s vetting interview 


Licensing Vetting Officer's observations and notes 

















MME Accel ne vhow 
Cyr MnuU g a \ DP —L i [Ou a Ane ae | =O fz 
Vv (sc\ or Pa Seoriak Ce 
also Jas | ft AS at = 
ur Co rw F Cr KE ee 
z nee. a Q Ov f O = a CA eS Or 4 eo f 
o Cf eH duns (4 ae aba picks. t 
pie £4 saasSinistie OST BOP Ps aarts Ly 
Ne ; 
. ee 4 
The individual a, Sav w( e 
taf CL e xk e AB re ( ZZ a Se We 


S CANS ¢ aot Aes YY YY ~2pt oe Staudt a 


+e settleltwn.- lEwe beret Non 
~ ig 


pee wt hh Peofle tr on 


f 


ovteol elas 


[The individual] did not show any unusual behaviour during the visit or interview. 


[The individual] also has purchased a H&F firearms safe with a capacity for 10 firearms and 
has a locked built-in compartment for ammunition and parts. Still to be installed. 


[The individual] has said he has travelled extensively for a few years, and has returned to 
Dunedin to settledown. He has now has met with people ina rifle and pistol clubs. 


The Dunedin Vetting Officer also checked and confirmed that the individual had appropriate 
firearms storage facilities in his home. As a result the Dunedin Vetting Officer recommended 


that the application be approved. 
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Figure 25: Recommendation by the Dunedin Vetting Officer 









@ 
i 2. Recommendation #, 

& F 

S E To be completed by the Licensing Vetting Officer (Police Employee) 

Pa 2 Summary statement as to applicant’s suitability to hold a firearm licence, and the suitability of the applicant’s 

S £ security arrangeme 








id 


y 
c 






co P P LAU 
S (| we eS oF f 


Cw j ° 5 01 

Ac nt SAN Sens est fl, fle 
2 ). PF 

nge- oF ce aucr_S 


Security Sy e cert! JS ena C Ee a 2 Food fe S Ce é if off 





Gur es asa ae C One Ae 10 iN S lock = atl 
CO C CL a rok phn ee ¢ Jaw A os AZ }- Gh t “ } 
mR~ oarnmnutrivn eo Seo ctavlix sa f . 
Recommendation 


| recommend the applicant be issued a firearm licence 


| do NOT recommend the applicant be issued a firearms licence 





Licensing Vetting Officer/ 


Poli | : , , 
rere Dunedin Vetting Officer 
Signature: 





Date: 2e7 (po 20) | £ 


Applicant: /The individual] appears to be a sound person who shows good attitudes and safety 
sense with the use of firearms. 


Security: Security cable and lock secured around concrete pile in a locked-off section of the 
locked basement. Parts and ammunition to be stored in safe. 


A different Vetting Officer (Waikato Vetting Officer) carried out interviews with gaming friend 
on 30 October 2017 and gaming friend’s parent on 2 November 2017, both at their home in 
Waikato. That Waikato Vetting Officer had previously audited their secure storage facilities 
for their pistols and military style semi-automatic firearms. 
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At the top of the Firearms Licence Vetting Guide, the Waikato Vetting Officer recorded 

that gaming friend was being interviewed as a substitute for the near-relative referee as 

the individual had “no relatives” in New Zealand. They also noted that the individual had 
“recently arrived from Australia”. During the vetting interview, gaming friend described the 
individual as a friend. They said that their initial contact with the individual, ten years earlier, 
had been through “video games etc” and that they had been in regular contact since. 

They noted the individual was an Australian, “widely travelled” and had recently come to 
New Zealand and would “probably settle here”. 


Figure 26: Extracts 1, 2 and 3 from the notes of gaming friend’s vetting interview 


selitineg_~«~ pw NZ-. Kees fh Aree fom 


a oe 
‘| (J. Referee (Spouse/Partner/Next of Kin) 


2 


Interviewed as NOK [next of kin] as applicant has no relatives in NZ. Recently arrived from 
Australia. 


is the photo a good likeness and are the applicant's details correct? YW) Yes ©) No 


What Is your relationship to applicant? Rica > 


How long have you known the applicant? /O ‘ SRA | 


Do you live with the applicant? O Yes C7 No How long? 





How would you describe > e. 
this relationship? 


Any further comment? 





Made contact 10 yrs ago via video games etc - Regular contact. He’s widely travelled. From 
Australia - recently came to NZ, will probably settle here. 


Gaming friend’s parent also described the individual as a friend and said they had known him 
for four years. 
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Figure 27: Extract 1 from the notes of gaming friend’s parent’s vetting interview 


is the photo a good likeness and are the applicant's details correct? @) Yes CS No 


How long have you known the applicant? et 2h eae | 
eS ee SE 


What is yout relationship to applicant? FRIASD a ie re 





30 The vetting notes record that gaming friend said the individual wanted access to firearms 
for the purpose of recreational hunting and, possibly, access to B Endorsements later for 
competition shooting. The answer of gaming friend’s parent was similar, but also noted that 
the individual wished to carry out target shooting. 


Figure 28: Extract 4 from the notes of gaming friend’s vetting interview 
For what purpose do you 


think the applicant needs 
(access to) firearms? 





For recreational hunting. 


Maybe a B endorsement later for competitions. 


Figure 29: Extract 2 from the notes of gaming friend’s parent’s vetting interview 


For what purpose do you 
think the applicant needs 
{access to) firearms? 





For hunting and targets. 
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Both referees considered the individual to be safe with firearms. Gaming friend said the 
individual was “well aware of safety and proper handling of firearms” and that he was a 
sensible, responsible person. Gaming friend’s parent stated that the individual was a “good, 
outstanding young man” and gave their opinion that the individual was “good and safe” with 
firearms. 


Figure 30: Extracts 5 and 6 from the notes of gaming friend’s vetting interview 


Describe the applicant’s 
attitude to, and behaviour 
with, firearms? 

How do you know this? 





Good - well aware of safety and proper handling. 


Personal observation. 


Do you consider the applicant suitable to have/have access to firearms? 4 Yes eS No 


Why do you holdthis view? | : btn in Ha ee | 





A sensible responsible person. 
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Figure 31: Extracts 3 and 4 from the notes of gaming friend’s parent’s vetting interview 


ae 


Do you consider the applicant suitable to have/have access {0 firearms? (Fives CQ No 


Why do you nold this view? 





A good outstanding young man. 


A nice person. 


Describe the applicant’ i ee ae p22 tml. Of 
attitude to, and behaviour 

with, firearms? ae a ee 
How do you know this? 
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Good and safe. 


Personal observation. 


Both referees said that they had shot with the individual and supported his application 
(see Part 4, chapters 2 and 4). 


Figure 32: Extract 7 from the notes of gaming friend’s vetting interview 





What Is the applicant’s 
experience with firearms? 





Been to range with me 3 times, used A & B category firearms. 
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Figure 33: Extract 5 from the notes of gaming friend’s parent’s vetting interview 


What is the applicant's 
experience with firearms? 





Been out with me - done some range shooting and instructed in care and safety with 
firearms. 


Gaming friend’s parent was asked “Do you know of any reason whatsoever as to why police 
should refuse to issue a firearms licence to the applicant?” They replied “No”. When asked 
“Why do you hold this view?”, gaming friend’s parent’s response is recorded as “No reasons 
known” and “Fully supportive”. 


Figure 34: Extract 6 from the notes of gaming friend’s parent’s vetting interview 


Do you know of any reason whatsoever 2s to why police should refuse to issue a firearms licence O Yes C sad 
to the applicant? 





Why do you hold this view? 


Any further comment? 





No reasons known. 


Fully supportive. 


Gaming friend’s response to the same set of questions is recorded as “No reasons known”. 
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Figure 35: Extract 8 from the notes of gaming friend’s vetting interview 


Do you know of any reason whatsoever as to why police should refuse to issue a firearms licence C) Yes (FiNo 
to the applicant? 


Why do youholdthisview? =| WE Le £2 / > 4 2 ; 








No reasons known. 


No overseas inquiries were made by the Vetting Officers, Licensing Clerk or former District 
Arms Officer. The individual’s sister Lauren Tarrant was not contacted as part of the 
application process. The individual had disclosed at his interview that he had received 
speeding tickets when he was younger but no criminal checks were made with Australian 





4 
=a 
authorities to confirm his (accurate) assertion that he had no convictions. set 
Z 
a 
Figure 36: Extract 7 from the notes of the individual’s vetting interview = 
= 
OQ 
oO 
Have you ever come to the attention of police for criminal offending including traffic offences? “Yes No 


Tell me about the offending: ai om ‘= Tis: ee 3 Dealt \ 
ores sa ao cee 


a a 


Do you have any drink drive convictions? ves (TN 
Have you ever previously made an application for a firearm licence in New Zealand Yes No 


or any other country, and been refused? 


oa ihe 


| have had speeding tickets when | was younger. 


N/A [not applicable]. 
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No medical records or reports were requested as the individual did not present with any 
noticeable health issues (mental or otherwise) during the interview, nor did he disclose any. 
Additionally, the referees did not suggest the individual suffered any health (including mental 
health) issues. 


On 16 November 2017, the complete licence application file was reviewed by the former 
District Arms Officer. Based on the information in the file, the former District Arms Officer 
saw no reason to conclude that the individual had not satisfied the fit and proper person test. 
Accordingly, the former District Arms Officer granted the individual’s firearms licence the 
same day. 


There is no record of when the licence was issued, but the individual would likely have 
received it via post approximately two weeks later. We know he had it by 4 December 2017, 
as this was the day he acquired his first firearm. 


5.3 Concluding comments 


In the next chapter, we will assess the adequacy of the process that we have just discussed. 
The key aspects we will discuss are the decision not to interview Lauren Tarrant, the 
acceptance of gaming friend as a substitute for Lauren Tarrant and the interviews of gaming 
friend and their parent conducted by the Waikato Vetting Officer. 
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Chapter 6: The adequacy of the process to grant the 
individual’s firearms licence 


6.1 Overview 


In this chapter we review the adequacy of the process that resulted in the individual’s 
application for a firearms licence being granted. 


Our discussion is organised around the following headings: 

a) Anatypical application. 

b) Clearing away minor process issues. 

c) Was the individual eligible to apply for a firearms licence? 

d) Should Lauren Tarrant have been interviewed as a referee? 

e) Should gaming friend and their parent have been accepted as referees? 
f) Why was important information not elicited in the vetting process? 


g) Concluding comments. 


6.2 Anatypical application 

The individual’s application had a number of unusual features: 

a) He had only been living in New Zealand for 15 days before initiating the process. 
b) He did not have an Australian firearms licence. 

c) Hedid not have a near relative living in New Zealand to act as a referee. 

d) Hewas unemployed and therefore could not use an employer as a referee. 


e) He had been travelling, for the most part, since 2014 and therefore did not have a recent 
overseas employer to provide a reference. 


f) He was living alone and therefore there was no one who lived at the same address as him 
who could be interviewed as part of the process. 


g) He ended up nominating as his referees a friend and their parent who lived together but 
in a different District from him. 
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h) The relationship he had with the substitute for the near-relative referee, gaming friend, 
was limited in terms of personal engagement and had been primarily online in character. 


i) His relationship with the other referee, gaming friend’s parent, was distinctly limited - 
confined to the individual staying with them briefly in 2013 and again in August 2017. 


The individual was therefore not a usual applicant with an easily checkable character. To put 
this another way, his application presented particular features that the vetting process had 
not been designed to address. It is important to keep this in mind when reading some of the 
critical comments in this chapter. 


6.3 Clearing away minor process issues 


There are three aspects of the process that warrant comment but can be dealt with very 
briefly. 


The first is that we see no problem with the interview of the individual and the assessment of 
his firearms storage arrangements. 


The individual was capable of presenting well, and plainly did so on this occasion. The 
reasons he gave for wanting a firearms licence were of a kind often given. If his claim to 
having “now” met with people in a pistol and rifle club was intended to suggest recent 
contact in Dunedin, it appears to have been untrue as the only people of that description 
that he had met, at least to our knowledge, were gaming friend and their parent. However, 
it may have been a reference to the possible visit or visits to the shooting club in Waikato in 
August 2017. In any event, there was no reason for the Dunedin Vetting Officer to challenge 
this contention. 


The Dunedin Vetting Officer did not inquire of the individual how well he knew his referees 
but the Firearms Licence Vetting Guide does not require such questions to be asked and 
there was no direction from the former District Arms Officer to explore this. In contrast, the 
Dunedin Vetting Officer would have known that the relationship between an applicant and 
referee is addressed during referee interviews. This means the criticisms we make in this 
chapter do not extend to the Dunedin Vetting Officer. 


The second is that the order of interviews did not follow the ordinary process where referees 
are interviewed before the applicant. This is not a requirement of the Arms Regulations 
1992. It is, however, a sensible practice as it allows any questions that might come out of 
the referee interviews to be put to the applicant. As it turned out, the interviews with the 
referees did not give rise to any such questions. This means the order of interviews is not 
material to what happened in the individual’s case. 
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The third is the conclusion of the former District Arms Officer and Licensing Clerk that the 
notations on the National Intelligence Application in respect of gaming friend and their 
parent did not preclude them from acting as referees. The former District Arms Officer 

and Licensing Clerk pointed out in evidence to us that gaming friend and their parent had, 
despite these notations, been granted, and retained, firearms licences and endorsements. 
Given the scrutiny associated with firearms licences and the greater scrutiny applied when 
endorsements are sought, the former District Arms Officer considered this outweighed the 
significance of the incidents recorded against them on the National Intelligence Application. 
The Licensing Clerk was of the same view. The Arms Manual’s guidance on the fit and proper 
person test for applicants indicates firearms licences are not confined to those of impeccable 
character. The referees were very experienced members of the firearms-owning community 
and were thus well placed to act as referees for applicants whom they knew well. So, we 
have no difficulty with the conclusion that the notations did not disqualify them from acting 
as referees. 





6.4 Was the individual eligible to apply for a licence? 


Section 23 of the Arms Act 1983 provides that “any person” over the age of 16 can apply for a 
firearms licence. There is no statutory requirement for citizenship, permanent residence or 
even residence. The individual was therefore eligible to apply for a licence. 
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The Arms Manual indicates that applicants must be “ordinarily resident in New Zealand”. 
This is not consistent with the Arms Act. And even if there were such a requirement - which 
those dealing with the application would probably have assumed - we are of the view the 
individual as of 1 September 2017 was ordinarily resident in New Zealand, despite him having 
been in New Zealand for 15 days. This is because his only home was in Dunedin, he intended 
to stay in New Zealand indefinitely and he was able to do so as an Australian. 


6.5 Should Lauren Tarrant have been interviewed as a referee? 


Although the logic of the Arms Regulations might suggest that the near relative who must 
be identified on the application should also be interviewed, this is not a requirement under 
the regulations. In deciding Lauren Tarrant was not an appropriate referee and telling the 
individual that he should provide a replacement referee, the Licensing Clerk was acting in 
accordance with New Zealand Police policy. That said, there remains a question whether 
Lauren Tarrant should have been interviewed by phone or video call. 
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Interviewing a near relative by phone or video call is not mentioned as a possibility in the 
Master Vetting Guide and no allowance for it is made in the processes set out in the Firearms 
Licence Vetting Guide. Such interviews are not part of standard licensing practice. 


We consider the standard licensing practice to which we have just referred is inappropriately 
limited. If there is a person in New Zealand who knows the applicant well enough to be the 
functional equivalent of a near relative - as closely connected to the applicant as a near 
relative would be - there will be little to gain by making contact with a near relative overseas. 
But if the person in New Zealand who knows the applicant best is not a functional equivalent 
of a near relative, it would obviously be sensible for Vetting Officers to make contact with 

the overseas near relative. By not providing for the overseas near relative to be contacted, 
firearms licensing practice has become controlled by the processes laid down in 

New Zealand Police policy and operational guidance. It has also drifted away from 

fulfilling the purposes of the vetting of referees, which includes establishing that they 

know the applicant well enough to adequately comment on whether the applicant is a fit 

and proper person. 


Given New Zealand Police policy and operational guidance was so explicit as to what should 
happen if an applicant did not have a near relative living in New Zealand, we make no 
criticism of the actions of the Licensing Clerk and former District Arms Officer in relation to 
Lauren Tarrant not being contacted. 


What would Lauren Tarrant have said if she had been approached? 


We think it likely that she would have supported the application. She was aware of the 
individual’s far right racist and Islamophobic views but she also understood that he 

had never engaged in acts of violence. She wished to retain a relationship with him if she 
could. As well, we doubt the individual would have put forward Lauren Tarrant as a referee 
unless he was reasonably confident she was going to be supportive. When we asked the 
individual whether he had spoken to Lauren Tarrant about being a referee he indicated that 
he had and that he believed that she would, if interviewed, have supported his application. 


All of that said, we have no reason to doubt that Lauren Tarrant would have answered 
honestly any questions put to her. So it is conceivable that probing questions of 
Lauren Tarrant might have produced answers resulting in the application receiving 
greater scrutiny than it did. 
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6.6 Should gaming friend and their parent have been accepted 
as referees? 


Who decided that gaming friend and their parent were appropriate referees? 


The decision that gaming friend and their parent were appropriate referees had a number of 
components: 


a) The Licensing Clerk’s noting of gaming friend and their parent as referees. 
b) The former District Arms Officer’s subsequent processing of the file on that basis. 


c) Sending parts of the file to the two Vetting Officers without directions to probe the nature 
of the relevant relationships. 


d) The limited nature of the questioning by the Waikato Vetting Officer of gaming friend and 
their parent about their relationships with the individual. 


e) The former District Arms Officer’s decision that the application be granted. 


What was the factual basis upon which they were accepted as referees? 


The Licensing Clerk and former District Arms Officer had limited recall of how they dealt 
with the application. This is unsurprising given how long ago the relevant events occurred 
and the large number of other applications they processed. The result was that their 
evidence involved substantial reconstruction based on what is apparent from the file and 
their usual practice. 


The Licensing Clerk was reasonably confident that they had asked the individual how long he 
had known gaming friend. If so, it is likely that the individual answered to the effect he had 
known gaming friend for ten years. It is likely that a similar question was asked about how 
long the individual had known gaming friend’s parent, which would likely have prompted 

the response that they had known each other for four years. We think it highly unlikely 

that the Licensing Clerk probed the individual as to the depth of his relationships with the 
two referees. There was nothing in the Licensing Clerk’s evidence or in the notes on the 
application form to suggest that such probing had occurred. 


The former District Arms Officer’s understanding of the depth of the relationships between 


the individual and gaming friend and their parent can have been no more extensive than that 
of the Licensing Clerk. 
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Based on the evidence they gave we consider it likely that the Licensing Clerk and the 
former District Arms Officer discussed the appropriateness of gaming friend and their parent 
as referees. Such a discussion would have been warranted by the National Intelligence 
Application notations against their names. Neither, however, suggested they had discussed 
whether gaming friend and their parent knew the individual well enough to act as referees. 


The former District Arms Officer did not direct the Vetting Officers to make particular inquiry 
into the relationships of the referees with the individual. 


In chapter 5 of this Part, we discuss the questions asked in the interview and the answers 
given by gaming friend and their parent. They said the individual was a friend whom they 
had known for ten years in the case of gaming friend and four years in the case of gaming 
friend’s parent. Gaming friend disclosed that their initial contact had been through “video 
games etc” and that they had subsequently been in regular contact. 


Did gaming friend know the individual well enough to serve as a referee? 


Gaming friend had indeed “known” the individual for ten years, but the relationship was 
primarily online. They had been in the physical presence of the individual for approximately 
21 days during the individual’s 2013 trip to New Zealand and on his return to New Zealand in 
August 2017. 


All of those we spoke to who engaged with this issue agreed that this level of interaction 
between the individual and gaming friend was insufficient to justify using them as a substitute 
for a near-relative referee. This included experienced members of New Zealand Police. These 
views were primarily based on the limited face-to-face interactions (approximately 21 days) 
between the individual and gaming friend, rather than an assessment of the significance 

of the online relationship. But a senior member of New Zealand Police with extensive 
involvement in firearms licensing was made aware of the online contact during our interview 
with them and still considered that the relationship was insufficient: 


... corresponding with someone, whether it’s online or by letter or anything which is not 
face-to-face, is a different thing to meeting and interacting with someone on a daily basis. 


And later: 


So, | would look for personal interactions. These are just numbers. But | was saying that the 
number of days is 21, you would not know someone very well... . ... | would say, look, what 
are these interactions? So, it’s the quality of the interaction, not just length of time. 
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In formal submissions made to us, New Zealand Police disputed the view that the 
interactions between the individual and gaming friend were insufficient to warrant gaming 
friend being a referee. The submission was expressed in this way: 


[Gaming friend] and [the individual] spent a substantial time in each other’s company, both 
in person and in online gaming forums. [Gaming friend] travelled with [the individual] for 
21 days and they spoke together in online gaming forums for 10 years. [Gaming friend] is 
also an experienced shooter, who had spent time with [the individual] while he was using 

a firearm. [Gaming friend] could attest to [the individual’s] behaviour and approach to 
firearms safety. 


This response does not capture the episodic nature of the relationship between the individual 
and gaming friend. They had spent approximately 21 days together while the individual was 
staying with the referees in 2013, travelling around with gaming friend between March and 
May 2013 and staying with the referees in August 2017. The 21 days of interactions were, 
accordingly, spread across two visits, with a gap of four years between them. As well, the 
submission is not particularly consistent with the responses we received when talking to 
those involved in the administration of the firearms licensing process, including those who 
dealt with the individual’s application. 


New Zealand Police’s submission suggests that a more detailed inquiry into the relationship 
between the individual and gaming friend may have legitimately concluded that he was an 
appropriate referee in place of Lauren Tarrant. The fact is that a detailed inquiry was not 
made. Given the individual was an Australian who had little apparent connection with New 
Zealand and thus had little opportunity to build personal relationships with anyone living 
here, more detailed inquiry was appropriate. 


It remains true that no one in New Zealand knew the individual better than gaming friend. 
So, on a literal reading of New Zealand Police policy and operational guidance - that the 
substitute for a near-relative referee should be the person in New Zealand who knows 

the applicant best in a personal sense - gaming friend was a suitable substitute. As well, 
despite their very limited in-person contact with the individual, gaming friend knew salient 
information about the individual’s character that they could have shared with the Waikato 
Vetting Officer - information about the individual’s far right political, racist and IsLamophobic 
views. If they had shared that information with the Waikato Vetting Officer, it may have 
resulted in the application receiving greater scrutiny than it did. 


A conclusion that gaming friend was an appropriate referee may have been defensible if 
firearms licensing staff had explored the depth of the relationship between the individual 
and gaming friend, including that it was mostly conducted online and had still decided they 
were an appropriate referee. But this is not what happened. 
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Did gaming friend’s parent know the individual well enough to serve as a referee? 


Gaming friend’s parent had no online relationship with the individual. Over a period of four 
years, the parent had spent only seven days in the presence of the individual prior to acting 
as his unrelated referee, most of which had been four years earlier. Their association with 
the individual was just a consequence of the individual’s online friendship with their child. 


We think it clear that the very limited relationship between gaming friend’s parent and the 
individual was too limited to justify them serving as a referee. 


Was it appropriate for a person and their parent to be used as referees? 


Regulation 15 provides for two referees, a near relative of the applicant and someone who is 
not a near relative of the applicant. It is, of course, possible, for such referees themselves 
to be related without the second referee being related to the applicant. Regulation 15 is, 
however, at least consistent with the view that a diversity of opinion is appropriate and 

that the two referees should be independent of each other. That said, a requirement for 
independence is neither spelled out in the regulations nor stipulated in New Zealand Police 
policy and operational documents. 


With the benefit of hindsight, we see the parent and child relationship as material to what 
happened. We think it likely that the parent’s willingness to serve as a referee, and the 
substance of what they told and did not tell the Waikato Vetting Officer, was associated with 
gaming friend vouching for the individual’s character. We doubt whether gaming friend’s 
parent would have been prepared to act as a referee based on seven days’ engagement with 
an applicant who was not a friend of their child. 


6.7. Why was important information not obtained in the 
vetting process? 
The important information that was not obtained 


Important information that was not obtained from the referees during the vetting process 
was the nature of their relationships with the individual and the individual’s far right political, 
racist and IsLamophobic views. 


Were the referees honest in the answers they gave to the Waikato Vetting Officer? 


The notes of the interview between gaming friend and the Waikato Vetting Officer set out a 
question “Do you know of any reason whatsoever as to why Police should refuse a firearms 
licence to the applicant?” and records the response as “No reasons known”. 
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Gaming friend was well aware of the individual’s extremist political opinions and that he was 
racist and IsLamophobic. But they said nothing of this to the Waikato Vetting Officer. Their 
“no reasons known” response indicates that they saw them as not being relevant to whether 
the individual should be granted a firearms licence. 


We put it to gaming friend that they had, in their discussions with the Waikato Vetting Officer, 
given the individual a favourable character reference despite being well aware of what the 
individual thought and said in relation to race and Islam. Their response was that in the 
online environment where the individual made those comments, it is impossible to tell 
whether people voicing racist and IsLamophobic views are serious. 


We are prepared to accept that gaming friend did not envisage that the individual was 
sufficiently serious in his views to further them with acts of violence. But we consider that 
they must have appreciated the individual was serious in the sense that he did have racist 
and IsLamophobic views, as opposed to just pretending to have such views. 


It is certainly open to question whether gaming friend’s knowledge of those views was 
consistent with his unqualified endorsement of the individual’s character. But, given the 
focus of our Terms of Reference was on Public sector agencies, we were not called upon 
to make findings in relation to gaming friend. 


Gaming friend’s parent also endorsed the individual’s character in an unqualified way. There 
is no evidence to show that they were aware of the individual’s views. And they certainly 

did not see him as potentially violent. It is, however, at least surprising that the parent - a 
member of the firearms-owning community for many years and well-familiar with the vetting 
process - saw their very limited interactions with the individual over only seven days as 
qualifying them to serve as a referee. 


Were the questions sufficiently particular? 


By asking the referees only the open questions stipulated in the Firearms Licence Vetting 
Guide about the individual and their relationships with him, the Waikato Vetting Officer made 
it easy for gaming friend and their parent to respond in the general way they did (see the 
vetting notes set out earlier in chapter 5 of this Part). 
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The limited questions asked were consistent with the Firearms Licence Vetting Guide. As 
well, the Waikato Vetting Officer knew the referees and was well aware of their extensive 
involvement with firearms and firearms licensing. On this point, the Waikato Vetting Officer 
said the referees always “complied with all the requirements” and they had been able to 
meet the requirements to “maintain membership of the [pistol] club”. The Waikato Vetting 
Officer therefore may have expected them to volunteer any information material to whether 
they knew the individual well enough to be referees or as to his character. As will be 
apparent, this did not happen. 


Questions about extreme views are not stipulated in the Firearms Licence Vetting Guide. In 
light of this and there being nothing to alert the Waikato Vetting Officer to the likelihood of 
the individual having extreme views, we do not criticise the Waikato Vetting Officer for not 
exploring that possibility. We are, however, more troubled by the limited questions asked of 
the referees as to their relationships with the individual. 


The Waikato Vetting Officer was of the view that the acceptability of gaming friend and 

their parent as referees had already been determined and believed this extended to the 
depth of their relationships with the individual. Given the absence of direction to test the 
relationships, we have a measure of sympathy for this position. We do not, however, accept 
its logic: 


a) The acceptance by the Licensing Clerk and former District Arms Officer of the suitability 
of the referees could only have been provisional in terms of the depth of the relationships 
because they had no opportunity to explore this with the referees. 


b) There are questions in the Firearms Licence Vetting Guide as to how long the referees 
have known the applicant and how they would describe their relationship with the 
applicant. This demonstrates that the nature and the extent of the relationship between 
the referees and the applicant is an issue that the Vetting Officer is required to assess. 


c) Inthe context of the individual’s application, the Waikato Vetting Officer should have 
determined that further exploration of the relationship between the individual and his 
referees was required. The Vetting Officer was aware that: 


i) there had been a referee substitution; 
ii) the referees lived in a different District to the applicant; and 


iii) gaming friend had met the individual through online gaming and that the individual 
was “from Australia, recently come to NZ, will probably settle here”. 


d) Onthe basis of their evidence to us, it is clear the Waikato Vetting Officer appreciated 
that gaming friend’s parent, at least, did not know the applicant particularly well. 
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New Zealand Police position as to process 


We received submissions from New Zealand Police as to the process followed to grant the 
individual a firearms licence. 


New Zealand Police contended: 


[The substantial amount of time gaming friend and the individual spent in each other’s 
company], included with the following context, has resulted in [the individual] receiving a 
firearms licence. 


The applicant explained he wanted a firearms licence so he could go hunting, target 
shooting and sport shooting - a common explanation for applicants in New Zealand. 


The applicant attended the safety course with no issues raised and successfully 
passed the firearm safety test. 


The referees were interviewed by a very experienced vetting officer, face-to-face and 
no concerns were raised with the interviews or about the referees. 


At the end of the application process, including vetting - there had been no 
suggestion of concerns or red flags raised. There was no suggestion that a more 
in-depth investigation was necessary. 


If New Zealand Police’s point that there “was no suggestion that a more in-depth 
investigation was necessary” includes inquiring into the depth of the relationships between 
the individual and the referees, then we disagree. But we do not otherwise take issue with 
the points made. 


The drift of the New Zealand Police submission is consistent with a view that the purpose of 
the vetting exercise is to find grounds on which an applicant or referees might be considered 
unfit or improper rather than to provide assurance that the fit and proper person test has 
been satisfied. We agree that there were no indicators to suggest that the individual or 
gaming friend and their parent were “unfit or improper”. But we think there were indicators 
at the time that warranted inquiry into whether the referees knew the individual well enough 
to provide assurance that he was a fit and proper person to possess firearms. 
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6.8 Concluding comments 


The unusual nature of the individual’s firearms licence application was not appreciated. 

The decision not to interview Lauren Tarrant was understandable in terms of New Zealand 
Police policy in place at the time, but it was unfortunate. Inadequate consideration was 
given to whether gaming friend and their parent knew the applicant well enough to serve as 
his referees. On the basis of usual licensing practice, gaming friend’s personal association 
with the individual was insufficient for them to serve as the substitute for a near-relative 
referee and inadequate attention was paid to this issue. The association of gaming friend’s 
parent with the individual was undoubtedly insufficient for them to act as a referee. 


We have considered whether these errors could be solely attributed to New Zealand Police 
as an institution. 


We are of the view that the guidance given by New Zealand Police to licensing staff was 
inadequate, as was their training. The Master Vetting Guide and the Firearms Licence Vetting 
Guide did not provide much assistance in dealing with the particular issues the individual’s 
application raised. The licensing staff involved with the individual’s application acted in 
good faith and in accordance with the Master Vetting Guide and the Firearms Licence Vetting 
Guide. But we do not see this as a complete answer. 


As we have explained, the purposes of vetting referees include establishing that the 
referees know an applicant well enough to provide reasonable assurance the applicant is 
a fitand proper person. The material available to the former District Arms Officer and the 
Waikato Vetting Officer indicated that inquiry into the relationships between the individual 
and his referees was warranted. The inquiry that was made was inadequate in light of the 
overarching purposes of referee vetting. 


This criticism does not extend to the Licensing Clerk as we regard their acceptance of the 
referees as provisional only and that was the extent of their formal role. 


Our criticism of the former District Arms Officer and Waikato Vetting Officer comes down to 
them not having exercised evaluative judgements as to how, and whether, the purposes of 

the vetting process could be, and were, satisfied. This criticism is heavily tempered by the 
realities that: 


a) neither had been trained to apply such evaluative judgements; 


b) New Zealand Police policy and operational guidance that governed their work did not 
clearly identify the purposes to which we have referred; 
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c) the same guidance provided limited assistance in identifying the very particular issues 
the individual’s application posed; and 


d) the increase in the number of firearms licence applications in 2017 because of the 
licensing bell curve meant that staff were under considerable pressure to process 
applications in a timely manner (see Part 5, chapter 4). 


We have considered what might have happened had the licensing policy and process been 
appropriate and how this may have impacted the events of 15 March 2019. This involves 
counter-factual analysis (an assessment of what would have happened if events had taken a 
different course) that is hypothetical and speculative. 


With the cautions just mentioned in mind, we consider that: 


a) If someone had spoken to Lauren Tarrant and she supported the application, a decision 
to grant the licence would have been difficult to fault. 


b) If it had been concluded that gaming friend or their parent did not know the individual 
well enough to serve as referees, the application would not have been granted at 
that time. 


c) If the individual’s application had not been granted, it is uncertain how he would have 
responded. We think it is possible, and perhaps likely, that he would have been able 
to obtain a licence eventually, perhaps by arranging for Lauren Tarrant to come to 
New Zealand for an interview. This may have delayed his preparation for the terrorist 
attack. It is also possible that he may have formulated a plan to carry out the terrorist 
attack using different means or abandoned his planning for a terrorist attack in 
New Zealand. 
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Chapter 7: Findings 


Our Terms of Reference required us to make findings as to: 


4(d) whether any relevant [Public] sector agency failed to meet required standards or was 
otherwise at fault, whether in whole or in part. 


We take the view that “required standards” include good practice as it applies to Public 
sector governance and management. These standards also include adhering to and 
implementing relevant regulatory frameworks, existing policy, operational guidance and 
administrative procedures in ways that give effect to their intended purposes. 


We find that New Zealand Police failed to meet required standards in the administration of 
the firearms licensing system in that: 


a) the Arms Manual, the Master Vetting Guide and the Firearms Licence Vetting Guide did 
not provide coherent and complete guidance as to the processing of applications where 
the applicant could not provide a near-relative referee able to be interviewed in person; 


b) New Zealand Police did not put in place arrangements to ensure that firearms licensing 
staff received systematic training and regular reviews of their practice; and 


c) in dealing with the individual’s firearms licence application, New Zealand Police did not 
adequately address whether gaming friend and their parent knew the individual well 
enough to serve as referees. 
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Chapter 8: Questions asked by the community 


A number of questions have been raised with us in submissions or in meetings relating to the 
issue of granting a firearms licence to the individual, which we now address. 


Did the individual have a history of recreational firearms use? 


There is no evidence the individual had a history of recreational firearms use in New Zealand 
before applying for his licence, aside from some shooting with his referees in 2013 and 
possibly in August 2017. Despite not having a firearms licence at that time, the individual 
could, under sections 22(2)(a) and 50(5) of the Arms Act 1983, lawfully use firearms (other 
than military style semi-automatic firearms or restricted weapons) if under the immediate 
supervision of the holder of a firearms licence. 


When we spoke to him, the individual told us that he had, on two occasions, used firearms 
overseas at tourist attractions. 


What were the reasons the individual gave to New Zealand Police for wanting a 
firearms licence? 


The individual told New Zealand Police in his interview that he wanted a licence for hunting, 
leisure, target shooting and sport. 


Was there a security inspection of the individual’s firearms storage? 


Did New Zealand Police in Dunedin conduct an interview with the individual for 
his firearms licence application? If an interview was conducted, did it meet the 
required standards? 


If an interview was conducted with the individual for his firearms licence application, 
were any red flags raised? 


A Dunedin Vetting Officer interviewed the individual at his home and checked and confirmed 
that he had appropriate storage facilities in his home for any future firearms. The Vetting 
Officer asked the individual questions in accordance with the operational guidance provided 
by the Firearms Licence Vetting Guide. The individual can present well and we are satisfied 
that he did so when interviewed. The Vetting Officer recorded that the individual did not 
show any unusual behaviour during the visit or interview. 
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What checks, if any, were made with Australian Police, including his criminal history, 
whether he had a firearms licence in Australia and to reveal any behavioural and/or 
health concerns from his home community? 


No checks were made with Australian Police with respect to the individual's firearms licence 
application. The vetting process required overseas checks only when an applicant disclosed 
a criminal conviction. The individual had no convictions in Australia and he accurately 
disclosed having received speeding tickets while in Australia. 


Medical records were not requested as during the interview process the individual did not 
present with, or disclose, any noticeable health issues (mental or otherwise). In addition, his 
referees did not raise any issues regarding the individual’s physical or mental health. 


How could the individual have been deemed fit and proper when he had only recently 
arrived in New Zealand, had no family connections here and no employment? 


Did New Zealand Police in Dunedin follow correct procedure when they approved the 
individual’s firearms licence application? 


Why was the individual’s firearms licence application approved without the two 
references meeting the relevant criteria? 


There was no information provided to New Zealand Police to indicate that the individual was 
not a fit and proper person to possess firearms. He had no criminal history and, on material 
supplied to New Zealand Police, offered legitimate reasons to possess firearms and did not 
disclose any apparent medical issues. 


Although the Arms Regulations 1992 require a near relative to be nominated as a referee, 
there is no requirement under the regulations for that referee to be interviewed. New 
Zealand Police practice requires referees for first time applicants to be interviewed in person. 
Where this is not possible in the case of a nominated near-relative referee, a New Zealand- 
based referee who knows the applicant best can be a substitute referee. 


The individual originally nominated his sister as his near-relative referee but, because she 
lived in Australia and could not be interviewed in person, she was not accepted as a referee 
by the licensing staff who dealt with the application. Gaming friend, who was substituted for 
her, was the person in New Zealand who knew the individual best. 


In chapter 7 of this Part we explain the aspects in which we consider that the administration 
of the firearms licensing process failed to meet required standards. 
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Had the individual’s referees met him in person? 
Were the individual’s referees from a recently created online chatroom? 
Were the individual’s referees related? 


Were New Zealand Police in Dunedin aware that the two references provided by the 
individual were sourced from an online forum who the individual had not met in person, 
and that they were parent and child? 


The referees are related - they are parent and child. The Firearms Licensing Clerk and the 
former District Arms Officer should have realised, and probably did, that they were parent 
and child, although they could not recall whether this was so. The Waikato Vetting Officer 
was aware of this relationship. 


Gaming friend first met the individual in 2007 through playing online video games and, prior 
to the individual applying for a firearms licence, had spent approximately 21 days with him in 
person in New Zealand in 2013 and August 2017. 


Gaming friend’s parent first met the individual in 2013, when the individual stayed with the 
family. The individual spent further time with gaming friend’s parent when he stayed with 

the family in August 2017. Over these two visits, the individual spent seven days in total at 
the house of gaming friend’s parent and, in this sense, had spent some seven days in their 
company. Gaming friend’s parent and the individual did not interact online. 


Did the individual’s referees give the same answers to the vetting questions? 


When New Zealand Police interviewed the individual’s two referees, and they had the 
same answers, why did it not raise any alarm bells? 


The referees gave similar, but not the same, answers to the vetting questions. Each of them 
was interviewed in Waikato by the same Vetting Officer but on different days. 


Gaming friend described the individual as a friend whom they had known for ten years, 
initially meeting the individual through playing video games online and that they had been in 
regular contact since that time. Gaming friend’s parent described the individual as a friend 
whom they had known for four years. 
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Both referees said that they had gone shooting with the individual and supported his 
application. Both are recorded as having responded “No reasons known” in response to a 
question of whether they knew of reasons why a licence should be refused. We take this as 
recording the substance of the answers given - that they were not aware of reasons why a 
licence should be refused. 


Were the individual’s referees white supremacists or neo-Nazis? 


There is no evidence to suggest that the referees are white supremacists or neo-Nazis. 


While gaming friend had interactions with the individual in which the individual expressed 
far right political, racist and IsLamophobic views, gaming friend did not usually respond to, 
or engage with, these expressions of opinion. Likewise, gaming friend did not object to them. 


Since 15 March 2019, have New Zealand Police issued a new directive informing vetting 
staff to take precautions regarding right-wing extremism, including warning signs such 
as tattoos, Celtic or Norse symbolism, books on the Third Reich, confederate flags, and 
reference to [the Oslo terrorist]? 


There is currently no new nationwide policy in place regarding inquiries into right-wing 
extremism with respect to an applicant for a firearms licence, although two Districts have 
issued guidance for staff. 


The guidance material produced by the two Districts was originally an intelligence product 
developed by, and shared within, New Zealand Police. 


If New Zealand Police (within the two relevant Districts) identify an applicant who belongs 
to an extreme right-wing or white supremacist group, this information may be recorded 

in their National Intelligence Application profile. It may also cause New Zealand Police to 
conduct further investigations to determine whether the applicant is fit and proper to hold a 
firearms licence. 


Please supply the number of refused applications for firearms licences in the past ten 
years, broken down by ethnic background (if possible). 


Between 2014 and 2018, 2.1 percent of all new applications for a standard licence were 
declined by New Zealand Police. New Zealand Police do not break down these figures by 
ethnic background. Refer to the graphic in chapter 4 of this Part for more information. 
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How do New Zealand Police track foreign nationals who import firearms? 


Any person intending to import firearms into New Zealand must possess a current firearms 
licence, and a permit issued by New Zealand Police. Firearms will be inspected by 

New Zealand Customs Service prior to the shipment being released to the importer. 

There is no other tracking and no distinction is drawn between foreign nationals and 

New Zealand citizens. 


Is the person who signed off on the individual’s online ammunition purchases the same 
person who was the investigating officer on the Bain family murders? 


No. 
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Glossary 


Term 


endorsement 


Definition 


Additional firearms licence privilege to possess and use certain 
types of firearms. 





firearms licensing process How a firearms licence application is processed by 


New Zealand Police. 





firearms licensing system The system of firearms licensing including policies and 


administration, and the regulation of semi-automatic firearms. 





fit and proper person 


A person of good character, who can be trusted to use firearms 
responsibly. 











GST Goods and Services Tax. 

iwi Te reo Maori (Maori language) term that refers to atribe -a 
large group of Maori people bound together by descent from a 
common ancestor and associated with a distinct territory. 

magazine A device that contains ammunition to feed into the chamber 


of a firearm. 





member of Police 


An employee of New Zealand Police, including a person 
seconded to New Zealand Police. 





military style 
semi-automatic 


A semi-automatic firearm fitted with: 


- amagazine capable of holding more than 15 .22 calibre 
rimfire cartridges or more than seven cartridges of any 
other kind; and/or 


- amilitary pattern free-standing pistol grip; and/or 


- a folding or telescopic butt; and/or 
- bayonet lugs; and/or 


- ora flash suppressor. 





National Intelligence 
Application (NIA) 


A database used by New Zealand Police to manage information 
relevant to operational policing. 
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Term Definition 


near-relative referee A family member of a firearms licence applicant who can attest 
to the applicant being a fit and proper person. 





semi-automatic A firearm that is capable of, with each pull of the trigger: 
- firing a cartridge and ejecting its case; and 


- chambering another cartridge. 





sworn officers New Zealand Police employees who have taken the constable’s 
oath under the Policing Act 2008. 





unrelated referee A person unrelated to a firearms licence applicant, such as a 
friend or an employer, who can attest to the applicant being a 
fit and proper person. 
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Chapter 1: Introduction 


Our Terms of Reference required us to make findings on: 


4(a) whether there was any information provided or otherwise available to relevant [Public] 
sector agencies that could or should have alerted them to the terrorist attack and, 
if such information was provided or otherwise available, how the agencies responded 
to any such information, and whether that response was appropriate; and 


(b) the interaction amongst relevant [Public] sector agencies, including whether there was 
any failure in information sharing between the relevant agencies. 


Underlying these issues is a concern that the relevant Public sector agencies may have 
missed opportunities to disrupt the 15 March 2019 terrorist attack and were therefore at 
fault. 


We asked all 217 agencies from the wider New Zealand Public sector (see the appendix) to 
give us any information they held about the individual and his activities before 15 March 2019. 
We assessed and tested this information against that received from other sources, including 
from submissions and our community engagement process, and meetings with experts. 


The next four chapters of this Part concern a range of issues: 


a) Inchapter 2, we discuss reports of suspicious behaviour at masajid around New Zealand 
made before 15 March 2019. We conclude that none of these reports related to the 
individual. 


b) In chapter 3, we discuss the New Zealand Security Intelligence Service’s investigation 
into a New Zealand-based IP address that accessed suspicious files in August and 
September 2017. We are uncertain whether this IP address activity was associated with 
the individual. If it was, it occurred in ways that made it impracticable for him to be 
linked to it. 


c) Inchapter 4, we discuss whether an employee of the New Zealand Security Intelligence 
Service saw social media posts made by the individual before 15 March 2019. We 
conclude that it is more likely than not that these posts did not come to the attention of 
the New Zealand Security Intelligence Service. 


d) In chapter 5 we review reports about the individual’s conduct at the Bruce Rifle Club. We 
conclude that no information about the individual’s behaviour at the Bruce Rifle Club was 
known by New Zealand Police before 15 March 2019. 
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Ten of the 217 agencies from the wider New Zealand Public sector held information about the 
individual before the terrorist attack. We list this information in chapter 6. In summary: 


a) Only three of the agencies involved in the counter-terrorism effort held any information 
about the individual - New Zealand Police, Immigration New Zealand and New Zealand 
Customs Service. 


b) With the possible exception of the IP address, neither of the two intelligence and security 
agencies had any information about the individual before the terrorist attack. 


c) Seven other Public sector agencies had information about the individual before the 
terrorist attack - the Ministry for Primary Industries, New Zealand Post, the Southern 
District Health Board, the Accident Compensation Corporation, the Ministry of Health, 
the New Zealand Transport Agency and the Parliamentary Service. 


In chapter 7, we evaluate the actions taken by the Public sector agencies in response to the 
information they held about the individual. Other than the email sent by the individual to the 
Parliamentary Service immediately before the terrorist attack, none of the other information 
known by Public sector agencies could or should have alerted them to the terrorist attack. 
Some of that information related, or may have related, to the individual’s planning and 
preparation for the terrorist attack, but this could not have been known by the Public sector 
agencies at that time. 


We set out our findings in chapter 8 on whether there was any information that could or 
should have alerted Public sector agencies to the terrorist attack and whether their response 
to that information was appropriate. 


Chapter 9 provides answers to specific questions asked by the community about what 
Public sector agencies knew about the individual before the terrorist attack and what they 
did with that information. 
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Chapter 2: Suspicious activity at masajid 


2.1 Overview 


We were told that, before 15 March 2019, Muslim individuals and communities had reported 
concerns to New Zealand Police about suspicious activity at masajid around New Zealand. 


After 15 March 2019, several people remembered suspicious activity at masajid that had 
happened before the terrorist attack but was not reported to New Zealand Police at the time. 
In this chapter we discuss only reports made before 15 March 2019, because it is only such 
reports that could have alerted New Zealand Police to the terrorist attack. 


2.2 Inquiries into reports of suspicious activity made before 
15 March 2019 


New Zealand Police provided us with all information dating back to 2010 that they held on 
complaints they recorded about suspicious activity at masajid. We reviewed this information 
and found two complaints made to New Zealand Police that may be relevant: 


a) On 20 February 2019, New Zealand Police received a complaint about a person who had 
made a threat on Facebook to burn a Qur’an at a masjid in Hamilton on 15 March 2019. 
New Zealand Police received other complaints about the person who made this threat. 
New Zealand Police dealt with these complaints by visiting the person who made the 
threat and giving them verbal and written warnings. This person was not the individual. 
We are satisfied that there is no connection between this person and the individual. 
The fact that the date associated with the person’s threat is the same as the day of the 
individual’s terrorist attack is a coincidence. 


b) On 26 February 2019, New Zealand Police received a complaint about a person at the 
Wellington Islamic Centre and Masjid. New Zealand Police were not able to identify the 
person. We reviewed evidence to determine whether this person could have been the 
individual. For the individual to have travelled from his home in Dunedin (in the South 
Island) to Wellington (in the North Island), he would have needed to take a plane ora 
ferry for at least part of the journey. Airlines and ferry companies had no record of the 
individual travelling between the South Island and the North Island in 2019. Based on 
all the evidence we have about the individual between 1 January 2019 and the day of 
the terrorist attack (see Part 4: The terrorist), we are satisfied that the individual was in 
the South Island in February 2019. We therefore conclude that the person seen at the 
Wellington Islamic Centre and Masjid in late February 2019 was not the individual. This is 
consistent with what the individual told us. 


329 





=> 
> 
= 
vu 
c 
a 
5 
n 
oO 
Qa 
ct 
° 
3 
» 
gQ 
oO 
a 
Q. 
oO 
wn 
an 
a 
oO 
= 
m 
a 
° 
c 
or 
ct 
=> 
oO 
co 
oO 
a 
= 
° 
ae 
wn 
ot 


2.3 Possibility of unrecorded complaints 


It is possible that some reports made by Muslim individuals and communities to New Zealand 
Police of suspicious activity were not recorded. During our inquiry we heard a range 

of general concerns from Muslim communities about their experiences of reporting to 

New Zealand Police (see Part 8, chapter 6). These included instances where people did 

not see officers writing anything down when being told about suspicious or threatening 
behaviour. 


We know that the individual was in the vicinity of the Invercargill Masjid on 2 January 2019 
when travelling with his mother and her partner (see Part 4, chapter 8). We also know he 
observed the Ashburton Masjid, Masjid an-Nur and the Linwood Islamic Centre on 8 January 
2019 and Masjid Al-Huda, Dunedin Islamic Centre in Dunedin on 11 January 2019 (see Part 4, 
chapter 6). The events of 8 January 2019 and 11 January 2019 were hostile reconnaissance. 
The same may be the case with the 2 January 2019 incident but we think it more probable 
that it was not because the individual was with his mother and her partner at the time. We 
are confident that he remained in and around Dunedin from 9 January 2019 until the morning 
of 15 March 2019. We have seen no evidence to suggest the individual carried out hostile 
reconnaissance of any other masajid in New Zealand. Given the range of material available 
to us (including his mobile phone data and records of financial transactions), we would have 
expected to have seen evidence if such reconnaissance had occurred. 


New Zealand Police did not receive any reports about the individual’s reconnaissance of the 


masajid in Christchurch, Ashburton and Dunedin. 


2.4 Concluding comments 


Before 15 March 2019, New Zealand Police did not hold any information about suspicious 
activity or reconnaissance exercises at masajid that related to the individual. 
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Chapter 3: The IP address 


3.1 Overview 


On 12 November 2018, the New Zealand Security Intelligence Service received an intelligence 
report that identified four IP addresses that had accessed suspicious files of “possible 
national security interest”. One of these IP addresses (122.61.118.145) had been accessing 
suspicious files containing content “that could facilitate actions that would result in threat 
and or attack activity”. A table attached to the intelligence report identified the IP address as 
being in Dunedin, New Zealand. ' 


This chapter: 
a) sets out the source of the information on the IP address; 


b) describes what the New Zealand Security Intelligence Service did with the IP address 
lead; 


c) examines whether the individual can be associated with the IP address activity; and 
d) considers whether the IP address could have come to light sooner. 


We held a hearing to inquire into this issue. We summoned relevant officials from the 
New Zealand Security Intelligence Service to attend and provide evidence under oath or 
affirmation. 


3.2 Where did the IP address come from? 


Operation Gallant Phoenix is an intelligence fusion centre established in 2013 (based near 
Amman, Jordan) with the aim of tracking the flow of foreign fighters in and out of Iraq and 
Syria. Over time it has evolved to provide a platform for partners to collect, monitor and 
process material regarding potential and existing terrorist threats and trends at home and 
globally. 


Currently, Operation Gallant Phoenix has many countries involved, including New Zealand, 
with a variety of participating agencies including military, civilian and law enforcement 
personnel. 


Its specific role is to contribute to intelligence operations that offer opportunities to further 
understand and potentially disrupt Da’ish. This is achieved through partner nation country 
collaboration and information sharing. Information generated through it has facilitated 
terrorist-related arrests in several countries and supported the opening of dozens of 
international investigations. 





' The IP address was recorded incorrectly in the body of the intelligence report, but the raw data, attached to the report, correctly 
recorded the IP address. As well, the lead was originally opened by the New Zealand Security Intelligence Service using the 
incorrect IP address. This was corrected and did not affect the investigation of the lead. 


331 





=> 
> 
= 
vu 
c 
a 
> 
n 
oO 
Qa 
ct 
° 
3 
» 
gQ 
oO 
a 
Q. 
oO 
wn 
an 
—] 
oO 
= 
m 
a 
° 
c 
or 
ct 
=> 
oO 
co 
oO 
a 
= 
° 
ae 
wn 
ot 


New Zealand’s involvement in Operation Gallant Phoenix (known as Operation Solar) began 
in late 2014 in response to an action taken against a New Zealander by Da’ish. As a result 
of this involvement, New Zealand officials came to understand the potential benefits to 
New Zealand’s national security from Operation Gallant Phoenix. 


In October 2016, the United States of America invited countries (including New Zealand) to 
participate fully in Operation Gallant Phoenix. 


In March 2017, a Cabinet paper described a key advantage of the Operation as being 

“its fusion approach to information and cross-agency collaboration to address the 
multi-dimensional challenges of terrorism”. The paper considered that this approach is 
likely to be used more frequently in the future and New Zealand’s continued participation in 
Operation Gallant Phoenix would “build our domestic capability, ultimately enhancing our 
ability to respond to future violent extremist threats”. A small New Zealand deployment was 
agreed by Cabinet through to April 2019. 


In June 2019, Cabinet noted that New Zealand had continued to gather security information 
from Operation Solar on the risk of terrorism and violent extremism and decided that it 
would continue New Zealand’s small presence until December 2020. We note that the 
Government’s decision was taken after 15 March 2019 and is agnostic as to threat ideology. 


Information from New Zealand’s deployment to Operation Gallant Phoenix has been passed 
on to the relevant domestic law enforcement agencies. This has provided benefits to 

New Zealand’s national security beyond what was initially expected and continues to prove 
the value of New Zealand’s participation. We have seen some reports from Operation Solar 
and can confirm that they provide real value and insight into matters of significance to 
New Zealand’s counter-terrorism effort. 


A pertinent example was a project initiated in 2018 aimed at discovering individuals in 

New Zealand who were accessing content of national security concern on the internet. 
Although narrowly focused, its purpose was to assist counter-terrorism agencies to better 
understand the scale of New Zealand-based online activity that had a national security nexus. 


The outcomes of this project included: 


a) Seventy-four unique IP addresses were identified that had accessed suspicious files since 
October 2016. 


2” 


b) Four of those IP addresses were identified as being of “possible national security interest 
and recommended for further investigation. Not all the suspicious files were related to 
Islamist extremist ideology. 


c) One of those four IP addresses was 122.61.118.145. This IP address is the subject of 
this chapter. 
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3.3. What material was the IP address accessing? 


The IP address (122.61.118.145) had accessed suspicious files relating to Al Qaeda 

propaganda and the Oslo terrorist’s manifesto between 24 August 2017 and 4 September 2017 
(New Zealand time). During the same period the IP address had accessed suspicious files 
relating to firearms (including Magpul parts) and tactics. 


3.4. What did the New Zealand Security Intelligence Service do 
about the IP address? 


Opening, pursuing and closing the lead 


On 12 November 2018, the New Zealand Security Intelligence Service opened the 

IPaddress as a lead and assigned it to a counter-terrorism investigator (see Part 8, 

chapter 5 for information on the New Zealand Security Intelligence Service’s leads process). 
The lead was assessed by the investigator, a more experienced investigator and the 
counter-terrorism manager as low priority, because: 


a) there was “insufficient information to assess nexus to national security”; 


b) there was limited information to suggest the intent, capability and imminence for 
potential violence and there was no obvious threat to public safety; 


c) the content did not display a clear ideology, as both Islamist and right-wing extremism 
were present; 


d) there were several possible reasons why someone might view this content, some of 
which would not raise national security concerns; and 


e) there was no other information to suggest it was “indicative of somebody who may be 
doing some bad things”. 


The purpose of investigating the lead was to “identify the user of this IP address in order to 
assess their relevance to national security”. The New Zealand Security Intelligence Service 
carried out an initial check of its records, but it had no information about the IP address. 


The New Zealand Security Intelligence Service used open-source look up tools that indicated 
that the IP address was associated with Spark New Zealand Limited (a telecommunications 
and internet services provider). On 14 November 2018, the New Zealand Security Intelligence 
Service submitted a Business Records Direction request to Spark New Zealand Limited 
seeking subscriber details for the IP address. A Business Records Direction, under sections 
143-145 of the Intelligence and Security Act 2017, was identified as the “least intrusive and 
most practical means by which to identify the user of the IP address” (see Part 8, chapter 14). 
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The Business Records Direction requested the subscriber details for the IPaddress as at 
31 August 2017, as this was the day on which more IP address activity had occurred than any 
other day in the date range. 


On 28 November 2018, the New Zealand Security Intelligence Service raised the IP address 
as a new lead at the Combined Counter-Terrorism Investigations and Leads Meeting 

(the Joint Leads Meeting) attended by the Department of Corrections, Immigration 

New Zealand, New Zealand Customs Service and New Zealand Police (see Part 8, chapter 12). 
The New Zealand Security Intelligence Service noted that they “were taking steps to identify 
the user”. Agencies were asked to check their records and advise the New Zealand Security 
Intelligence Service if they had any information on the IP address. No agencies had any 
information on the IP address. 


On 4 December 2018, Spark New Zealand Limited responded to the New Zealand Security 
Intelligence Service’s Business Records Direction. It confirmed that the IP address was 
“within a range of IP addresses owned by Spark” on 31 August 2017 and was “in the range for 
[Digital Subscriber Line (DSL)] Broadband” connections. Spark New Zealand Limited advised, 
however, that the date provided by the New Zealand Security Intelligence Service was too 
long ago for their records. 


On 11 December 2018, the New Zealand Security Intelligence Service emailed Operation 

Solar to see if the IP address had “been active recently accessing any content of security 
concern”. The New Zealand Security Intelligence Service advised Operation Solar that it was 
looking into the IP address from a right-wing extremism angle. The next day, Operation Solar 
responded to the New Zealand Security Intelligence Service, advising that it could not identify 
any additional activity on the IP address. 


Following the response from Operation Solar, New Zealand Security Intelligence Service staff 
discussed what, if any, additional steps could be taken to identify the subscriber details. 
New Zealand Security Intelligence Service staff did not consider it appropriate to ask the 
Government Communications Security Bureau for assistance with the lead. They thought it 
would not have met the threshold to obtain a warrant (see Part 8, chapter 14) and that the 
Government Communications Security Bureau would be unlikely to hold information on an 
IP address last used more than a year before the request. 


No other open-source checks were carried out. This is because people do not usually post 
their IP address on social media or other forums, and therefore open-source checks are 
unlikely to link an individual with an IP address. 
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New Zealand Security Intelligence Service staff concluded there were no other options 
available for investigating the IP address and determined the lead should be closed. Before 
closing the lead, the experienced investigator peer reviewed the investigative steps taken on 
the lead and agreed the lead should be closed. The investigator’s manager told us they were 
not involved in the decision to close the lead. 


On 12 December 2018, the investigator submitted the lead for closure and a manager in the 
Counter-Terrorism Unit approved closure of the lead. The New Zealand Security Intelligence 
Service noted that if the IP address came to its attention in the future, for instance through 
more recent reporting, another subscriber check would be submitted. 


On 23 January 2019, the New Zealand Security Intelligence Service updated the Joint Leads 
Meeting. It said it could not identify the subscriber of the IP address and, because of that, 
the lead had been closed. It said that if the IP address came to its attention again, the lead 
would be re-opened. 


Post-15 March 2019 review 


On 16 March 2019, the New Zealand Security Intelligence Service reviewed 10 recently opened 
and closed leads that related to right-wing extremist ideologies. The purpose of re-opening 
these leads was to “identify any others who might hold similar right-wing views and be 
inspired by the 15 March attacks”. Investigating whether the IP address was associated with 
the individual was said to be a “useful” but secondary purpose. 


The New Zealand Security Intelligence Service undertook the following checks to identify the 
subscriber of the IP address: 


a) It re-checked with Spark New Zealand Limited to see if subscriber information on the 
IP address was available. 


b) It requested assistance from the Government Communications Security Bureau (which 
sought information from Five Eyes partners). The Government Communications 
Security Bureau also analysed the IPaddress. It was “unable to discover any additional 
information beyond that provided by the [New Zealand Security Intelligence Service]” 
because there was “no indication of who the customer was” at the time of the activity in 
the intelligence held by the Government Communications Security Bureau. 


c) It requested assistance from Operation Solar. 


d) It sought advice from Security Liaison Officers about any assistance that partners may 
have been able to provide. Security Liaison Officers are posted overseas to engage 
with a broad range of key international partners. They represent the interests of the 
New Zealand Security Intelligence Service and are a conduit for information sharing, joint 
training and other forms of cooperation. Security Liaison Officers work closely with other 
New Zealand government staff posted abroad, particularly those with national security 
and intelligence responsibilities. 
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e) It cross-referenced the IP address with data from the individual’s devices. The devices 
were the individual’s mobile phone, an SD card from the individual’s drone and his 
external hard drive, the latter two having been recovered by New Zealand Police (see 
Part 4: The terrorist). Spark New Zealand Limited also provided the New Zealand 
Security Intelligence Service with IP address information associated with the individual’s 
internet router at 112 Somerville Street, Dunedin. 


f) It cross-referenced the IP address with the individual’s online activity data sourced from 
ANZ Bank and Trade Me (provided to the New Zealand Security Intelligence Service by 
New Zealand Police). The ANZ Bank and Trade Me data was from the period 1 April 2018 
to 13 March 2019. This is later than the IP address was accessing suspicious files. 


None of these checks provided any further information about the IP address. 


On 10 April 2019, the New Zealand Security Intelligence Service closed the lead again. The 
New Zealand Security Intelligence Service said that it had exhausted all possible options for 
identifying the subscriber of the IP address and it could not definitively exclude, or establish, 
a link between the IP address and the individual. 


Was the lead correctly prioritised as low? 


As noted earlier, the IP address lead was prioritised as low because, amongst other things, 

it did not have a clear national security nexus. It was reiterated to us during the hearing 

that the content accessed did not provide evidence of an imminent threat, the intent of the 
user of the IP address was unclear and the ideology was, on the face of it, also unclear. We 
agree. The activity had occurred more than 12 months before the intelligence report received 
from Operation Solar. There is nothing in the material accessed to suggest an imminent 
mobilisation to violence that required the New Zealand Security Intelligence Service to act 
under urgency and therefore give the lead a higher priority. 


Additionally, there are practical reasons why leads of this type should be prioritised as low. 
We were told during the hearing that many people view violent and extreme content online 
either out of curiosity or to fuel their ideology, but not necessarily in preparation for acts of 
violence. It would be impracticable, and produce false positives, if all leads of this type were 
given a medium or high priority. 


We are satisfied that the lead was correctly prioritised as low. 


Were all reasonable steps taken? 


There were inquiries that the New Zealand Security Intelligence Service might have 
undertaken on the IP address lead but did not: 


a) It did not check with Five Eyes partners or New Zealand Public sector agencies other than 
those at the Joint Leads Meeting. This is because the New Zealand Security Intelligence 
Service assessed that it would have been highly unlikely for those agencies to hold 
information about the subscriber of a New Zealand IP address last used more than a year 
before the request. 
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b) It did not request information from financial institutions because such requests usually 
require the identity of a person to be known before these checks are made. 


c) It did not check with the Government Communications Security Bureau. This was for 
two reasons. First, we were told that the chances of the Government Communications 
Security Bureau holding information about the IP address that it had not already 
passed on were slim. Second, we were told that it would overwhelm the Government 
Communications Security Bureau’s resources if all IP addresses (particularly those 
associated with low priority leads) were checked with it. 


It is open to question whether checks with Five Eyes partners, other Public sector agencies, 
the Government Communications Security Bureau and, perhaps, financial institutions 
should have been carried out. At the time, the likelihood of such checks being successful 
was assessed as too low to justify making the requests. This assessment is supported by 
the lack of success the New Zealand Security Intelligence Service had in identifying further 
information relating to the IP address after 15 March 2019. 


Given the lack of information available at the time, and the low priority of the lead, checks 
with the above-named agencies may not have met the “necessary and proportionate” test in 
the Intelligence and Security Act (see Part 8, chapter 14). Some of these checks may have 
required a warrant. And, even checks that would not have required a warrant may still have 
been disproportionate. 


We are satisfied that the inquiries that were undertaken were reasonable. 


3.5 Can the individual be associated with the IP address activity? 


The IP address may have been based in Dunedin but we are not sure. Spark New Zealand 
Limited and the Government Communications Security Bureau both say that open-source 
look up tools are reliable to a country level and generally reliable to a city level. The 
Government Communications Security Bureau’s analysis suggests that the IP address “is 

part of a range of IP addresses used by Spark New Zealand Limited for internet access 
services in the vicinity of Dunedin ... [and it] is likely that in the past, this IP address has also 
been assigned to some Spark New Zealand Limited broadband customers in the vicinity of 
Dunedin”. This is consistent with what Spark New Zealand Limited advised in 2018 - that the 
IP address was “within a range of IP addresses owned by Spark” on 31 August 2017 and was 
“in the range for DSL Broadband” connections. 


Spark New Zealand Limited has recently informed us that it cannot find any records of 
activity associated with the IP address range 122.61.118.0-122.61.118.255 (which includes the 
IP address in which we are interested). It told us that it is possible that an overseas party 
may have identified this IP address range as unused and has advertised (and/or used) that 
range themselves. If this hypothesis is correct, there is no reason to associate the suspicious 
IP activity with Dunedin and thus the individual. We are not in a position to assess the 
likelihood of this. 
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4) 


The New Zealand Security Intelligence Service raised the possibility that the IP address 

was used as part of a Virtual Private Network (VPN) to conceal the location of the person 
accessing the suspicious files. If so, the person accessing the suspicious files may not have 
been in or around Dunedin at the time. 


The discussion that follows proceeds on the basis that the IP address was probably based in 
Dunedin but may have been part of a VPN and was associated with a DSL connection. 


Figure 37: Timeline of events relevant to the IP address lead 


Date 


Event 


The individual arrived in Dunedin on a Jetstar flight from Auckland. 


20 August 2017 


23 August 2017 


23 August 2017 


24 August 2017 
at 5.53 am (NZST) 


24 August 2017 
24 August 2017 


24 August 2017 
at 12.47 pm (NZST) 


1 September 2017 


4 September 2017 
at 7.33 am (NZST) 
5 September 2017 


8 September 2017 
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He checked in to the Law Courts Hotel. 


The individual purchased a mobile phone service from 
Spark New Zealand Limited. 


The individual signed the lease for his flat in Somerville Street, 
Dunedin. 


The IP address (122.61.118.145) began accessing suspicious files. 


The individual checked out of the Law Courts Hotel. 


The individual purchased a home wireless broadband connection. 
He picked up the wireless modem from the Spark New Zealand 
Limited store in central Dunedin. 


The individual set up and tested his internet connection with 
Spark New Zealand Limited at his Somerville Street flat. 


The individual paid the application fee for a firearms licence. 


The IP address (122.61.118.145) accessed suspicious files for 
the last time. 


The individual made a request to Spark New Zealand Limited to 
change his internet from a wireless service to fibre. 


The shift of the individual’s internet from wireless to fibre was 
completed. The individual received a new IP address following 
the shift. 
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The individual arrived in Dunedin on 20 August 2017 and spent four nights at the Law Courts 
Hotel while he looked for a flat and purchased a car. He told us that, at that time, he had a 
laptop. He also had a mobile phone. 


On 23 August 2017 he signed the lease for his Somerville Street flat. We were told that it is 
highly likely the individual was given the keys to the flat on 23 August 2017 and therefore had 
access to the flat from this point onwards. On 24 August 2017, he checked out of the hotel, 
began living at the Somerville Street flat, purchased internet access, picked up a modem 
from Spark New Zealand Limited and established an internet connection. 


The accessing of suspicious files started on 24 August 2017 and finished on 4 September 2017. 
On 5 September 2017, the individual contacted Spark New Zealand Limited and requested 

a shift to the fibre network. The switch to fibre was effective from 8 September 2017, which 
resulted in the individual receiving a new IP address. 


There are several factors that might suggest that the IP address activity was associated with 
the individual: 


a) The accessing of suspicious files was via an IP address probably associated with Dunedin 
at a time when the individual was in Dunedin. 


b) The accessing of suspicious files occurred when the individual was taking concrete steps 
towards mobilising to violence. In particular, he applied for a firearms licence, paying his 
application fee on 1 September 2017. 


c) The content accessed is broadly consistent with the individual’s interests in firearms. 
The IP address accessed suspicious files on Magpul firearms parts and firearms tactics. 
We know that the individual later acquired Magpul firearms parts. We also know that 
he must have downloaded videos of firearms tactics at some time, because some 
were recovered from the SD card associated with his drone. While the firearms videos 
recovered from the drone SD card do not match the videos accessed by the IP address, 
it is possible that the individual downloaded, and later deleted, other firearms tactics 
videos that matched the suspicious files on firearms tactics accessed by the IP address. 
On his recovered “To do list” (see Part 4, chapter 6), he had instructed himself to go 
through and delete his videos to “make sure all is clean and good optics”. 


d) The content accessed by the IP address is consistent with the individual’s interest in the 
Oslo terrorist. We know that at some point the individual must have downloaded the 
Oslo terrorist’s manifesto. This is because it was recovered from the SD card associated 
with his drone. 
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e) The hypothesis that it was not the individual who used the IP address to access the 
suspicious files might appear to involve quite a coincidence - that there were two people 
with an actual or probable connection to the same place (the individual who was in 
Dunedin and another person using an IP address probably associated with Dunedin) at 
the same time acting on similar interests in firearms and terrorism (the individual, by 
applying for a firearms licence and the other person, by accessing the suspicious files). 


There are, however, some complicating considerations. 
The IP address was associated with a DSL internet access service. 


If the individual was responsible for the IP address activity, he needed to have had either his 
own DSL internet access service or access to another DSL internet access service (perhaps 
using public WiFi or a VPN) at 5.53 am on 24 August 2017 and to have had continued access to 
the same internet access service until 4 September 2017. 


We know that the individual bought his modem on 24 August 2017, and that his internet 
connection was established at 12.47 pm that day at his Somerville Street flat. We can exclude 
the possibility that the IP address was associated with the internet connection established at 
Somerville Street on 24 August 2017 for two reasons: 


a) The individual did not have access to that internet connection until 12.47 pm, 
approximately seven hours after the accessing of suspicious files began at 5.53 am. 


b) The wireless internet access established did not use a DSL connection. 


There are other ways in which the individual may have been responsible for the IP address 
activity. In particular, he may have accessed the suspicious files using: 


a) aprevious occupant’s modem and internet connection or an unsecured WiFi access point 
at, or in, close proximity to 112 Somerville Street (“the first scenario”); 


b) a free public WiFi service or free WiFi at a local business (“the second scenario”); or 
c) aVPN (“the third scenario”). 


In each of these scenarios, the IP address may have been associated with the internet 
connection through which the individual accessed the suspicious files. 


In the case of the second and third scenarios, it would have been practically difficult, 
perhaps almost impossible, to link the suspicious internet activity to the individual. For our 
purposes, they are thus of limited relevance. We will, however, discuss each of the scenarios 
in turn. 
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The first scenario, accessing the suspicious files from Somerville Street, could have happened 
in two ways. Spark New Zealand Limited had provided internet access to a previous 
occupant at 112 Somerville Street. Although the account was terminated on 3 August 2017, 

it is possible that the service remained intact and live. The previous occupant may have left 
the modem behind along with the password, assuming there was one. If so, the individual 
could have used it after he had access to the flat. As well, it is conceivable that there was an 
unsecured WiFi access point close to 112 Somerville Street (perhaps in a nearby residence) 
that the individual may have been able to use. Either of these mechanisms would have 
enabled him to access the internet from Somerville Street. 


This first scenario assumes that the individual was at Somerville Street at 5.53 am on 

24 August 2017. He had paid to stay at the Law Courts Hotel on the night of 23 August 2017 
and checked out on 24 August 2017 from that hotel. Checkout is from 7.00 am-10.00 am. 
There is no obvious reason why he would have been in Somerville Street at 5.53 am. This is 
particularly so given that the individual’s flat was unfurnished on 23 August 2017 and he did 
not purchase any furniture until the afternoon of 24 August 2017. These timings indicate that 
this scenario is not particularly plausible. 


In the second scenario, the individual accessed the suspicious files using the same public 

WiFi service or free WiFi at a local establishment (such as McDonald’s or Starbucks). This, 
however, would have been highly inconvenient for the individual given the times of day the 
IP address was active. 


We can illustrate the point just made by being more specific. It is possible that the 
individual may have used WiFi at the Law Courts Hotel to access suspicious files at 5.53 am 
on 24 August 2017 and then returned to that hotel to access, in the same way, the same 
WiFi over the next 11 days (that is until 4 September 2017). Leaving aside whether he would 
practically have been able to access WiFi there after checking out, it does not seem very 
likely that he would have gone to the trouble of travelling back to the Law Courts Hotel on 
all other occasions when the suspicious files were accessed, given that there were more 
convenient alternatives open to him. So, the second scenario too is not very plausible. 


In the third scenario, the individual accessed the suspicious files using a VPN. In this 
scenario, the individual: 


a) started to access the suspicious files at 5.53 am on 24 August 2017, perhaps using his 
mobile phone and a VPN which used the Dunedin-associated IP address; and 


b) continued to access the suspicious files over the next 11 days, using either his mobile 
phone or other devices and connections, via the same VPN and Dunedin-associated 
IP address. 
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We have looked closely at the individual’s financial transactions over the relevant period. 
None exclude the possibility that he could have accessed the internet at the relevant times. 
However, the individual made financial transactions around two of the relevant times of 

IP address activity - 7.45 pm and 8.15 pm on 24 August 2017 - that have implications for the 
plausibility of the third scenario. The two transactions were: 


a) At7.06.19 pm, the individual paid for some 20 household items at the checkout at 
The Warehouse South Dunedin using an Australian bank card, which was debited with 
AU$407.20. 


b) At 8.36.19 pm, the individual paid for groceries at the checkout at the Pak N Save 
supermarket in South Dunedin using an Australian bank card, which was debited with 
AU$176.74. 


The two shops (The Warehouse and Pak N Save) share a carpark. It is about six minutes 
away, by car, from 112 Somerville Street. 


The individual could have completed these transactions and accessed the internet at 

7.45 pm and 8.15 pm by either staying in or around the two shops and using a mobile device 
or returning to 12 Somerville Street to access the internet from there and then driving 

back to shop at Pak N Save. The plausibility of the first option is questionable, given the 
convenience of accessing the suspicious files at his home and the inconvenience of doing so, 
presumably from his car, in between shopping. Equally open to question is the plausibility of 
the second option given timing constraints. 


Allowing for the time necessary for the individual to get back to his car from The Warehouse 
checkout, put the goods in his car and drive back to 112 Somerville Street, he could have 
been there in time to access the internet at 7.45 pm. But if allowance is also made for 
unpacking his car at 112 Somerville Street and putting away his purchases in his flat, the 
timing becomes a little tighter. 


The next relevant time for the IP address activity is 8.15 pm on the same night. In relation 

to this, the timing is distinctly tight. Assuming the individual left Somerville Street at say 
8.16 pm, and making reasonable allowances for the time required to get into his car, drive to 
Pak N Save (six minutes away), park his car and walk into the Pak N Save, he could not have 
commenced shopping before 8.25 pm. This leaves only 11 minutes to select AU$176.74 
worth of groceries, get to the checkout and pay by 8.36 pm. All of this assumes that after 
the individual returned to his flat from The Warehouse, he began accessing the internet at 
7.45 pm either without unpacking and sorting out the 20 items he had just purchased or 
doing so very quickly. It also assumes that he again accessed the internet at 8.15 pm but 
then left almost immediately for Pak N Save, without bothering to review the suspicious 

files he had accessed, drove to Pak N Save and selected and paid for a reasonably substantial 
amount of groceries, all within approximately 20 minutes. 
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The third scenario also assumes that: 


a) the individual used a VPN configured to use the same IP address on each occasion the 
suspicious files were accessed, thus creating a discernible pattern; 


b) the IP address was associated with New Zealand and Dunedin, meaning that the pattern 
created was associated with the country to which he had just moved and the city in 
which he had just started to live; and 


c) he therefore acted in an incautious way, which is not particularly consistent with the use 
of a VPN and his attempts at operational security. 


The significance of the coincidence to which we have referred above (that there were two 
people with an actual or probable connection to the same place at the same time acting on 
similar interests in firearms and terrorism) depends on how common it is for such files to 
be accessed. On the material we have seen, this is rather more common than most people 
might expect. 


In the end, we are not confident either way whether it was the individual who accessed the 
suspicious files. What is more significant is that, if he did so, it was almost certainly in a way 
that prevented him being linked to the accessing of those files. 


For the sake of completeness, we note that during our interview with the individual we did 
not ask him directly whether he was responsible for the IP address activity. This was because 
the information relating to the IP address and the accessing of suspicious files had not been 
declassified at the time of our interview. We did, however, ask him some related questions. 
In response to these, the individual told us that: 


a) he did not download the Oslo terrorist’s manifesto until mid-2018; 
b) he frequently used public WiFi connections when he was travelling; and 


c) he was familiar with the use of VPNs and Tor browsers. 


3.6 Could the IP address have come to light sooner? 


We have considered if Public sector agencies were remiss in not earlier getting data on 
New Zealand-based IP addresses accessing content of national security concern, say in late 
2017 or early 2018. We do not believe they were. 


At the time, the New Zealand Security Intelligence Service did not have a tool to enable them 
to find IP addresses accessing content of national security concern. Operation Solar did not 
come with a list of capabilities and tools. So, it was for the New Zealand personnel to identify 
the capabilities and tools and test how they could be applied to support New Zealand’s 
counter-terrorism effort. This did not happen until well into 2018. 
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3.7. Concluding comments 


We are uncertain whether the individual was responsible for the IP address activity. If he 
was responsible for accessing the suspicious files, he did so in a way that prevented the 
activity being linked to him. It was therefore not information that could or should have 
alerted Public sector agencies to the terrorist attack. 


For the reasons given above, we are, in any event, satisfied that the New Zealand Security 
Intelligence Service followed appropriate leads management processes in dealing with the 
IP address lead. 
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Chapter 4: Did Public sector agencies 
have information about the Barry Harry Tarry 
username? 


4.1 How the issue arose 


After 15 March 2019, the New Zealand Security Intelligence Service commissioned a review 
by an external assessor of its processes and decision-making in the lead up to 15 March 2019 
(the Arotake Review).” 


An employee involved in the immediate post-attack investigation became aware that 

the individual had used the username Barry Harry Tarry (see Part 4: The terrorist). They 
recalled that, sometime in 2018, while they were on secondment to the Combined Threat 
Assessment Group, they had seen a report containing images of social media posts made by 
Barry Harry Tarry. The employee reported their recollection to the external assessor carrying 
out the Arotake Review. 


The New Zealand Security Intelligence Service undertook a comprehensive search of 

its records, but neither it nor the external assessor was able to validate the memory. 

We have received full cooperation from both the employee and the New Zealand Security 
Intelligence Service in our inquiries into this matter. 


The employee said that the posts comprised a limited amount of “social media-type material, 
including broadly right-wing views and memes”. The employee said that the posts “did not 
appear inherently threatening or violent”, and that the material was similar to the online 
rhetoric used by those who hold extreme right-wing views (see Part 2, chapter 5). 


The employee's recollection is that the material did not warrant escalation due to lack of 
intent, capability or imminence. The employee said that if the material had been seen as 
warranting escalation, they would have submitted it to the New Zealand Security Intelligence 
Service’s Counter-Terrorism Unit for leads triage. In the normal course of their job, the 
employee is “regularly exposed to threat-related information” and the New Zealand Security 
Intelligence Service considers the employee “well qualified to judge ... information and 
whether it warranted escalation”. 


The employee recalled discussing the posts with a colleague (or colleagues) at the time. 
However, no one else could recall the conversation or the Barry Harry Tarry username. 


The material was not referred on.? As a result, the Barry Harry Tarry posts were never the 
subject of a lead investigation and thus we have avoided using that term in this context. 





? New Zealand Security Intelligence Service The 2079 Terrorist Attacks in Christchurch: A review into NZSIS processes and decision 
making in the lead up to the 15 March attacks (Arotake Review) (June 2019). 


3 New Zealand Security Intelligence Service, footnote 2 above. 
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4.2 What did the employee see? 


This is an elusive issue. 


The employee’s memory is that the social media posts from Barry Harry Tarry were ina 
finished intelligence report, which was in a system accessible to the Combined Threat 
Assessment Group.* The Combined Threat Assessment Group is responsible for preparing 
threat assessments that inform decision-makers of the threat posed to New Zealand and 
New Zealanders by terrorism (see Part 8, chapter 4). Its role, therefore, is distinct from the 
New Zealand Security Intelligence Service’s Counter-Terrorism Unit, which is responsible for 
investigating leads. While the Combined Threat Assessment Group may conduct its own 
online research, it typically receives and evaluates information in reports produced by other 
agencies and organisations, that is, processed intelligence reporting and assessment. It 
does not collect or access raw social media posts or other online material. 


After 15 March 2019, the employee made authorised inquiries to try to substantiate (or 
otherwise) their recollection. The employee was unable to find any report or communication 
in the New Zealand Security Intelligence Service’s records referencing Barry Harry Tarry that 
pre-dated 15 March 2019. 


In addition to the employee’s inquiries, the New Zealand Security Intelligence Service also 
conducted a thorough search of the New Zealand Intelligence Community’s records, including 
its own records. The search included speaking with the employee’s colleagues. There was 
nothing found that referenced Barry Harry Tarry dated before 15 March 2019. The search 

did not, however, include a search of images that were not in a machine-readable format. 
That said, no collection activity has been identified that could have resulted in reporting 
containing images such as those the employee recalled seeing. 


We also asked New Zealand Police and the Government Communications Security Bureau 
(which contribute funding and seconded staff to the Combined Threat Assessment Group) to 
search their records for material referencing Barry Harry Tarry dated before 15 March 2019. 
Neither agency had any information on Barry Harry Tarry. 


We know that on 12 February 2018, the individual made several posts to The Lads Society 
Season Two Facebook page under the username Barry Harry Tarry (see Part 4, chapter 4). 
These posts correspond generally to what the employee said they saw, because: 


a) they are social media posts by Barry Harry Tarry; 
b) the posts use IsLamophobic language and indicate a right-wing extremist ideology; and 


c) the tone of comments would likely have attracted the interest of an intelligence officer 
who saw them. 





4 New Zealand Security Intelligence Service, footnote 2 above. 
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We inquired into whether the The Lads Society Season Two Facebook page posts made by 
Barry Harry Tarry may have been what the employee remembers viewing. However, the 
employee did not recognise the posts when we showed them to the employee. We have also 
found no plausible mechanism by which the posts could have been provided to the Combined 
Threat Assessment Group. As well, the Australian Security Intelligence Organisation told us: 


Before 15 March 2079, the individual ... had not been identified by [the Australian 
Security Intelligence Organisation], nor was he the subject of an [Australian Security 
Intelligence Organisation] investigation. Consequently, [the Australian Security 
Intelligence Organisation] had not shared any information on the individual with 

[the New Zealand Security Intelligence Service] or any other New Zealand agency before 
the [terrorist] attacks. 


We therefore think it is possible that the employee’s memory may be awry. 


4-3 Concluding comments 


The only posts associated with the username Barry Harry Tarry that we are aware of, and 
that may have warranted investigation, are those set out in Part 4, chapter 4. As explained, 
we are Satisfied that the employee could not have seen these posts before 15 March 2019. 


If the employee saw some posts of which we are not aware, we are in no position to 
second-guess their assessment that they did not justify further action. 
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Chapter 5: Bruce Rifle Club allegations 


5.1 Overview 


On 19 March 2019, Peter Breidahl claimed in a Facebook post to have had concerns about 
the culture and conduct of people (including the individual) at the Bruce Rifle Club. These 
concerns arose from a visit Peter Breidahl made to the Bruce Rifle Club on 19 November 2017 
to take part in a shooting competition. 


He also claimed that he had raised these concerns with New Zealand Police in late 2017. 

In the Facebook post, he said that the Bruce Rifle Club was “the perfect breeding ground” 
for someone to train for a terrorist attack. He repeated these allegations during an interview 
with New Zealand Police on 21 March 2019. 


If Peter Breidahl’s allegations are correct, this means that New Zealand Police had 
information (in the form of the complaint) before 15 March 2019 about a group of people that 
included the individual. The position of New Zealand Police is that no such complaint was 
made. 


Our Terms of Reference required us to identify what information New Zealand Police held 
about the individual. We had to therefore address whether: 


a) the individual was present at the Bruce Rifle Club on 19 November 2017 (and so was a 
subject of the alleged complaint); and 


b) Peter Breidahl made a complaint to New Zealand Police as he claims. 


In the course of our inquiries, we have spoken to Peter Breidahl, his former partner, a friend 
of his who accompanied him to the Bruce Rifle Club on 19 November 2017, members of the 
Bruce Rifle Club (including some who were present at the competition on 19 November 2017) 
and the former District Arms Officer to whom he claims to have made the complaint and who 
gave evidence to us under oath. We have reviewed New Zealand Police interviews of those 
involved, the club’s records, relevant email correspondence, photographs taken on the day 
of the competition, Facebook posts made by Peter Breidahl and the diary of a club member. 
We also asked the individual whether he went to the Bruce Rifle Club on 19 November 2017. 


In this chapter we evaluate the issues raised under the following headings: 
a) The allegations. 

b) What happened at the Bruce Rifle Club on 19 November 2017? 

c) Was the individual present at the Bruce Rifle Club on 19 November 2017? 


d) Did Peter Breidahl make a complaint to New Zealand Police about the Bruce Rifle Club? 
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5.2 The allegations 


Peter Breidahl is not a member of the Bruce Rifle Club. Before 19 November 2017, 
he had been to its range on one occasion, to sight a rifle. The reason for his visit on 
19 November 2017 was to participate in a shooting competition that was open to 
non-members. 


Peter Breidahl’s position is that, because of what he saw and heard on 19 November 2017, 
he was concerned about the “ethos and values of the club members”. This position was 
explained in his 19 March 2019 Facebook post, during his interview with New Zealand Police 
and during discussion with us. He has given several reasons for his concern: 


a) Some members of the Bruce Rifle Club were dressed in camouflage “to look like militia 
at the range” and others were wearing military rank insignia. He told us that he thought 
other rifle clubs would send home anyone dressed in that way and, if it happened again, 
ban the person from the range. 


b) He heard numerous Islamophobic comments. For example, he heard a club member say 
that the number of Muslim immigrants in New Zealand meant that the New Zealand Army 
would have to be deployed in the streets to counter the risk of terrorism. 


c) There was a person present who was talking about combat and the 1996 Port Arthur 
mass shooting in Tasmania, Australia while holding the same kind of weapon used in 
that attack. His belief is that this person was the individual. 





d) Some members passed around military style semi-automatic firearms to other members 
who were not authorised to handle such firearms. 


e) Confederate flags hung from the walls of the Bruce Rifle Club. Although this is what 
Peter Breidahl said during his interview with New Zealand Police, when speaking to us he 
conceded that he had not seen confederate flags but claimed to have seen confederate 
stickers on vehicles and gun cases. 


f) He heard a member say that if university students can carry skateboards, he should be 
allowed to carry a firearm on the basis that skateboards and firearms are both sporting 
equipment. 


g) Some members were talking about zombies and the perfect weapon for a zombie 
apocalypse. Peter Breidahl told us that he thought this was not an appropriate 
conversation to have at a rifle club. 
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In his statement to New Zealand Police made after his 19 March 2019 Facebook post, 
Peter Breidahl said that: 


a) the culture of the Bruce Rifle Club, and particularly the discussion about the Port Arthur 
attack, disturbed him to such an extent that he left the shooting competition early; and 


b) on 20 or 21November 2017 he lodged a formal complaint in person with the former 
District Arms Officer at Dunedin Central Police Station. 


In his interview with New Zealand Police on 21 March 2019, and again when speaking to us, 
Peter Breidahl said that he asked New Zealand Police in 2017 to send a plainclothes officer to 
a range shoot at the Bruce Rifle Club. He expected that, if this happened, it would result in 
members’ firearms licences being revoked. He said that the former District Arms Officer he 
spoke with dismissed his concerns and told him “they’re a bit funny down there but they’re 
all right, it’s nothing to worry about”. He also told us that the former District Arms Officer 
responded to concerns he expressed about a particular member of the Bruce Rifle Club by 
saying that the member was “a silly old duffer” and not to worry about them. 


In his Facebook post on 19 March 2019, Peter Breidahl said that he had met the individual 

at the Bruce Rifle Club on 19 November 2017 and that he was “not fucking right”. In his 
statement to New Zealand Police on 21 March 2019, Peter Breidahl said that he “strongly” 
believed he had seen the individual at the competition. He said the individual was involved 
in the conversation about the Port Arthur attack, and that he had been holding the same kind 
of weapon used in that attack at the time. He said that the individual “knew far too much 
about what happened [in Port Arthur]”, such as where victims were shot and the position of 
their bodies. Peter Breidahl also confirmed to us that he believed he had seen the individual 
at the Bruce Rifle Club on 19 November 2017 (although he conceded he could not be certain). 
He recalled that what stood out about the person he thought was the individual was his lack 
of empathy when discussing the details of the Port Arthur attack. 


5.3 What happened at the Bruce Rifle Club on 19 November 2017? 


We think it is appropriate to review the evidence about what happened at the competition 
held at the Bruce Rifle Club on 19 November 2017. 


We were not required to make findings about the conduct of private individuals and thus did 
not attempt to resolve all differences of opinion about what happened that day. There is 

no doubt that Peter Breidahl was concerned about what he saw and heard at the Bruce Rifle 
Club on 19 November 2017 and that for this and perhaps other reasons, his interactions with 
members were acrimonious. 
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In a series of posts made on 19 and 20 November 2017 on a Facebook page titled “canterbury 
long range lead throwers club”, Peter Breidahl discussed what had happened at the 
competition. In these posts he mentioned the word zombie, complained about the clothing 
worn and claimed that someone had said that because refugees were being let in “we will 
have the army deployed on the streets of Dunedin soon due to all the terrors attacks we will 
be facing”. He also mentioned that there had been discussion of a “sniper threat” at the 
university and whether someone could bring a gun to the university, and that there had been 
a suggestion equating skateboards to firearms as they were both sporting items. We will 
come back shortly to the detail of some of these posts. 


A friend of Peter Breidahl went with him to the Bruce Rifle Club on 19 November 2017 but did 
not take part in the competition. On 26 March 20719, this friend told New Zealand Police they 
remembered staying at Peter Breidahl’s house the night before the competition and driving 
with him to the Bruce Rifle Club the following morning. 


Peter Breidahl’s friend told New Zealand Police they found it concerning that there was 
“glorification” by Bruce Rifle Club members of camouflage clothing, branded hats and 
shooting equipment. They recalled a conversation at the competition about gun regulation, 
and a comment that it was unfair that university students could carry skateboards on 
campus, but firearms owners could not carry weapons. They told New Zealand Police they 
were “a bit concerned” about this comment and told us that Peter Breidahl had openly 
disagreed with it at the time. They also told New Zealand Police, and later repeated to us, 
that there was “quite a heated discussion” at the end of the competition that Peter Breidahl 
may have been engaged in, but they could not remember what it was about. 


Peter Breidahl’s friend told New Zealand Police that they left the competition with the overall 
impression that the Bruce Rifle Club was not a “healthy social community”, that its members 
“shared similar viewpoints” and did not seem to “have many other social interactions”. 

They told New Zealand Police and us that they and Peter Breidahl talked about their shared 
concerns during the car ride home and at dinner that evening. However, they did not know 
whether Peter Breidahl had told anyone else about his concerns. 


Peter Breidahl’s former partner told us that he had complained about the competition when 
he returned home that night, specifically that attendees were dressed in camouflage clothing 
and talked about what they would do when the zombie apocalypse came. They believe that 
Peter Breidahl may have had issues with safety at the Bruce Rifle Club but could not recall 
him raising any other complaints. They told us they did not think anything of his complaints 
at the time. 
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In his interview with New Zealand Police on 21 March 2019, Peter Breidahl said that his 
account of what happened at the Bruce Rifle Club on 19 November 2017 could be backed 
up by amember who had been at the competition. That person was also interviewed by 
New Zealand Police on 21 March 2019. They recalled the conversation about the Port Arthur 
attack but said that it was about the changes to firearms legislation in Australia, that there 
was “nothing untoward” about what was said and that there had been no one “supporting 
what had occurred [during the attack]”. They also said that Peter Breidahl did not leave the 
competition early, instead staying to complete the competition. 


Members of the Bruce Rifle Club who gave statements to New Zealand Police after the 
terrorist attack and who spoke to us strongly challenged most of Peter Breidahl’s claims 
about the culture of the club. They: 


a) confirmed that Peter Breidahl had complained on the day about people at the 
competition wearing camouflage, but noted that some members, including former 
military personnel, choose to wear camouflage clothing as it is hard wearing and 
practical; 


b) believed that, to the extent that political views and issues are shared and discussed at 
the club, they are not extreme or otherwise of concern; 


c) confirmed that while members talk about mass shootings, particularly if they have 
recently been in the news, these are general discussions and do not glorify such events; 


d) denied having seen military style semi-automatic firearms passed to people who were 
not authorised to handle them; 


e) denied having seen confederate flags at the club; and 


f) believed that any conversation about zombies would have related to television shows or 
marketing of firearm accessories, such as Zombie Max ammunition. 


One of the Bruce Rifle Club members stated that, while the club generally has a friendly and 
welcoming atmosphere, racist statements might be made occasionally. No one from the 
Bruce Rifle Club we spoke to could recall anyone making racist comments on the day of the 
competition. 


5.4 Was the individual present at the Bruce Rifle Club on 
19 November 2017? 


The individual's first contact with the Bruce Rifle Club was in January 2017, when he 
emailed the club (from Europe) enquiring whether it was still open. During the 
communications that followed, he said that he was “not in the area” but was looking to 
“move down that way sometime in August” and would “[h]opefully drop in sometime in 
August” (see Part 4, chapter 3). 
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Figure 38: Timeline of events relevant to whether the individual was present at the 
Bruce Rifle Club on 19 November 2017 


Date 


21-22 January 2017 


17 August 2017 
20 August 2017 
1 September 2017 


27 October 2017 


15 November 2017 


16 November 2017 


17 November 2017 


19 November 2017 


20 November 2017 


4 December 2017 


5 December 2017 


7 December 2017 


12 December 2017 


Event 


Email correspondence between the individual and the 
Bruce Rifle Club about whether the club was still open. 


The individual arrived in New Zealand. 
The individual arrived in Dunedin. 
The individual applied for a firearms licence. 


Peter Breidahl made initial contact with the Bruce Rifle Club 
about participating in the competition on 19 November 2017. 


Peter Breidahl contacted the Bruce Rifle Club to register for 
the competition. 


Former District Arms Officer granted the individual a firearms 
licence and submitted a request for the individual’s firearms 
licence card to be created. 


Peter Breidahl confirmed he would attend the competition and 
asked if a friend could attend. 


Bruce Rifle Club competition held. Peter Breidahl is recorded as 
attending, but there is no record of Peter Breidahl’s friend or the 
individual attending. 


Peter Breidahl made posts on the “canterbury long range lead 
throwers club” Facebook page about the Bruce Rifle Club. 


Peter Breidahl made further posts on the “canterbury long range 
lead throwers club” Facebook page. 


The individual purchased his first firearm from Hunting and 
Fishing Dunedin. 


The individual purchased ammunition from Lock, Stock and 
Smoking Barrel. 


The individual contacted the Otago Shooting Sports Rifle and 
Pistol Club about joining the club and received a reply. 


The individual purchased a semi-automatic firearm (the same 
kind of weapon as was used in the Port Arthur attack). 
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Date 


14 December 2017 


20 December 2017 


7 January 2018 


9 January 2018 


10 January 2018 


14 February 2018 


16 February 2018 


17-18 February 2018 


18 February 2018 


22 February 2018 


25 February 2018 


26 February 2018 
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Event 


The individual attended the Bruce Rifle Club for a probationary 
shoot. 


The individual emailed the Otago Shooting Sports Rifle and 
Pistol Club asking whether there was an upcoming shoot and 
received a reply. 


The individual attended the Otago Shooting Sports Rifle and 
Pistol Club. 


The individual emailed the Otago Shooting Sports Rifle and 
Pistol Club and attached a completed membership form. 


Email correspondence between the individual and the Otago 
Shooting Sports Rifle and Pistol Club. 


The individual’s membership at the Otago Shooting Sports Rifle 
and Pistol Club was approved. 


The Otago Shooting Sports Rifle and Pistol Club emailed the 
individual to advise that his membership application had been 
approved. 


Email correspondence between the individual and the 
Otago Shooting Sports Rifle and Pistol Club. 


The individual attended the Otago Shooting Sports Rifle and Pistol 
Club, as did the secretary of the Bruce Rifle Club. 


The Bruce Rifle Club sent a group email (copied to the individual) 
advising that it would be open the following Sunday 25 February 
2018. 


The individual attended the Bruce Rifle Club for a probationary 
shoot. 


The Bruce Rifle Club emailed a membership application to the 
individual. 


The individual completed an application form and emailed it 
to the Bruce Rifle Club. 


The individual’s membership at the Bruce Rifle Club was 
approved. 


23 There are some elements of uncertainty about these events: 


a) Wedo not know when the individual received his firearms licence card. It must have 
been after 16 November 2017 (when the former District Arms Officer approved his 
application) but before 4 December 2017 (when he bought his first firearm). It is, 
however, almost certain that he would not have received his firearms licence card by 
19 November 2017, because the former District Arms Officer only asked for his card to 
be created on 16 November 2017. It usually takes several weeks for the card to be 
made and sent out to the licence holder. 


b) We know that the secretary of the Bruce Rifle Club met the individual, but not when this 
was. The secretary told us they met the individual at the Otago Shooting Sports Rifle and 
Pistol Club in late November or early December 2017. This seems unlikely. The individual 
did not email the Otago Shooting Sports Rifle and Pistol Club until 7 December 2017 
and there is no record of him attending that club until 7 January 2018. As well, records 
indicate that the first time both the individual and the secretary attended the Otago 
Shooting Sports Rifle and Pistol Club was on 18 February 2018. It is likely that the 
individual and the secretary met on that date because on 22 February 2018 the secretary 
copied the individual into a group email telling interested parties that the Bruce Rifle 
Club would be open on Sunday 25 February 2018. 


c) The individual is first recorded as attending the Bruce Rifle Club on 14 December 2017. 
The context in which this occurred in unclear, but it appears that it was a probationary 
shoot. We have not been able to obtain evidence that establishes clearly how this was 
arranged. The individual told us that he had contacted the club and had arranged to 
meet a member at the gate. When we explained to him that there is no record of relevant 
emails in December 2017 between him and the club, he said that the contact may have 
been by text. 





24 The following factors support the view that the individual was at the Bruce Rifle Club on 
19 November 2017: 


a) Peter Breidahl believes that the individual was there and discussed the Port Arthur attack 
while holding the same kind of weapon used in that attack. As we have earlier noted, the 
individual had been to Port Arthur (see Part 4, chapter 2). The individual purchased the 
same kind of weapon used in the Port Arthur attack but not until 12 December 2017. 
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b) Peter Breidahl’s friend who attended the competition with him also believes that the 
individual was there. In their discussion with us, Peter Breidahl’s friend pointed out 
a person in one of the photographs from the competition whom they thought was the 
individual. That person is not the individual. 


c) The individual’s confirmed attendance at the Bruce Rifle Club on 14 December 2017 may 
have been encouraged by discussions with members if he had been at the competition on 
19 November 2017. 
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There are several factors that suggest that the individual was not at the Bruce Rifle Club on 
19 November 2017: 


a) 


b) 


c) 


d) 
e) 


f) 


8) 


h) 
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It is distinctly unlikely that the individual had his firearms licence card by 19 November 
2017, and he had not bought any firearms by that date. There is evidence (attendance 
records and emails) confirming his presence at shooting ranges after he had bought his 
first firearm (on 4 December 2017) but no such evidence of any earlier attendance. 


The individual is not noted as a member or non-member attendee on the competition 
attendance sheet. Although there were four observers (that is, non-participants) at the 
competition whose names were not recorded, the individual does not appear to have 
known anyone who was there and there is no apparent reason why he would have gone as 
an observer. 


The behaviour attributed to the individual by Peter Breidahl is odd. It does not seem 
very likely that the individual would have gone to a club, where he did not know anyone, 
and made unpleasant remarks about the Port Arthur attack while holding the same kind 
of weapon used in that attack. If he had been holding that weapon, it would have been 
someone else’s, given that he had not yet bought his first firearm. Such behaviour is not 
consistent with how the individual behaved at the Bruce Rifle Club after he joined nor his 
general caution about drawing attention to himself. 


The individual is not visible in photographs taken at the competition. 


If Peter Breidahl and his friend saw the individual on 19 November 2017 as they believe, 
this would have been the only occasion they ever met him. This was 16 months before 
the terrorist attack. 


Members of the Bruce Rifle Club who were at the competition on 19 November 2017 say 
that the individual was not there. They are better placed to comment on this, as they 
have the advantage of having come to know the individual after he became a member in 
February 2018. 


The individual told us that he was not present at the Bruce Rifle Club on 19 November 
3017. 


We have checked electronic records of the individual’s financial transactions and 
attendance at his gym. There is nothing in that evidence that is inconsistent with him 
being at the Bruce Rifle Club on 19 November 2017. He did, however, use a credit card 
at the Pak N Save supermarket in South Dunedin at 1.53 pm that day. As the competition 
ran from 9.00 am to 3.00 pm, the individual could have attended in the morning, but, 
given the distance between the Bruce Rifle Club and Pak N Save (approximately 

50 kilometres), he would have to have left the club by 1.00 pm or shortly afterwards. 
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Peter Breidahl could not recall exactly the time of day when he talked to the man whom 
he thought was the individual. But Peter Breidahl said that he felt as though it was more 
likely towards the end of the day. It is not very probable that the individual would have 
driven from Pak N Save to the Bruce Rifle Club, to arrive there just before the competition 
ended. 


Based on the evidence we have reviewed, we think it more likely than not that the individual 
did not attend the competition at the Bruce Rifle Club on 19 November 2017. Accordingly, we 
conclude that he was not there. It follows that we also conclude that any complaint Peter 
Breidahl may have made to New Zealand Police about the Bruce Rifle Club was not about 

the individual. This conclusion may be enough to address the requirement in our Terms of 
Reference but, for the sake of completeness, we think it appropriate also to address whether 
such a complaint was made. 


5.5 Did Peter Breidahl make a complaint to New Zealand Police 
about the Bruce Rifle Club? 


Peter Breidahl claims that he lodged a formal complaint to the former Dunedin District Arms 
Officer on 20 or 21 November 2017 about the Bruce Rifle Club. The position of New Zealand 
Police is that Peter Breidahl did not make such a complaint. There are no records of any such 
complaint. The former District Arms Officer to whom Peter Breidahl claims the complaint 
was made has no recollection of Peter Breidahl raising any concerns. 


We have no doubt that at the time, and in the immediate aftermath, of the competition, 
Peter Breidahl had concerns about the Bruce Rifle Club. It is clear that he took exception 
to the wearing of camouflage clothing. We note that the friend who accompanied him also 
had some concerns about the participants at the Bruce Rifle Club. And his former partner 
confirmed that, following the competition, Peter Breidahl voiced complaints about some of 
the behaviour he had observed that day. That he had concerns and complaints is perfectly 
apparent from his comments on the “canterbury long range lead throwers club” Facebook 


page. 


The former Dunedin District Arms Officer had dealt with Peter Breidahl on two earlier 
occasions. On 27 June 2017, the former District Arms Officer and a sworn police officer met 
with Peter Breidahl. The purpose of the meeting was to discuss whether Peter Breidahl’s 
firearms licence should be revoked, after New Zealand Police had received evidence that he 
had stored a firearm in the boot of his car secured by acable. In a statement to New Zealand 
Police and in evidence to us, the former District Arms Officer recalled Peter Breidahl being 
“agitated” and “swearing repeatedly” to the point where the sworn police officer told him to 
calm down. 
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Following the meeting, Peter Breidahl was issued with a warning in relation to the firearm in 
the boot incident. One of the conditions of the related decision not to revoke his firearms 
licence was that he had to surrender a firearm. On 30 June 2017 he handed over that firearm 
to the former District Arms Officer. The former District Arms Officer had been anxious about 
dealing with Peter Breidahl again, given his behaviour on 27 June 2017. As it turned out, 

Peter Breidahl’s behaviour when he handed over the firearm on 30 June 2017 was unremarkable. 


When he spoke to us, Peter Breidahl acknowledged that he had previously dealt with the 
former District Arms Officer and a sworn police officer in the context of the discussion over 
whether his firearms licence should be revoked. He also acknowledged that that the former 
District Arms Officer would have remembered those interactions. 


Some of Peter Breidahl’s 19 and 20 November 2017 posts on the Facebook page titled 
“canterbury long range lead throwers club” are relevant to whether he made a complaint to 
the former District Arms Officer. We have already referred to one post in which he said one 
member believed that the army would be “deployed on the streets of Dunedin”. In the same 
post he mentioned another member, saying: 


| think most people right [the club member] off as some 
sort of harmless old duffer. | have no doubt [they know] the 
arms officer very well and would no doubt be used to [their] 
ramblings. 


The person Peter Breidahl was talking about is the same person he (Peter Breidahl) told 


us he complained about to the former District Arms Officer. He told us that the former 
District Arms Officer had responded saying that the member was a “silly old duffer”. 


In response to this post, another commenter offered this advice: 


Id make a call to the arms officer the [club member] sounds 
like a fruit loop the next aramoana type fruit loop. 


Peter Breidahl responded to this advice, on 20 November 2017: 


... the thing is.... There were SO many red flags from so many 
people. It’s not my place to make that call. ... 
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Three points come out of this. 


First, it is clear that Peter Breidahl was not the first person to raise the idea of making a call 
to the former District Arms Officer, as it was suggested by another commenter in response to 
his Facebook posts. 


Second, in response to the commenter, Peter Breidahl indicated that he did not intend to 
call the former District Arms Officer. When we put this to him in the natural justice process 
(see Part 1, chapter 4), Peter Breidahl said: 


It’s not my place to make the call on who should or should not make the call as to who ts the 
holder of a firearms license. That is the job of the arms officer. 


This explanation is not consistent with the details of the exchange. The suggestion was 

made that he “make a call to the Arms Officer”. His response was that it was not for him 

“to make that call”. This most easily reads as a statement that he was not going to call the 
former District Arms Officer as had just been suggested. Indeed, it is difficult to read it any 
other way. Although it is possible that he later changed his mind, an initial statement on 

20 November 2017 that he did not intend to contact the former District Arms Officer (“it’s not 
my place to make that call”) followed by an immediate change of heart on 20 or 21 November 
2017 (when he says he made the complaint) is not particularly consistent with his overall 
narrative. 


Third, Peter Breidahl told us that the former District Arms Officer had dismissed his complaint 
about a member of the Bruce Rifle Club by saying that that member was a “silly old duffer”. 
Peter Breidahl used the same uncommon expression (“old duffer”) about that club member 
in his Facebook post before he could have talked to the former District Arms Officer. If what 
he says is correct, this is a surprising coincidence. A more likely explanation is that Peter 
Breidahl misattributed to the former District Arms Officer a view about that member - that 
they were an “old duffer” - that reflects not what the former District Arms Officer may have 
said but rather what Peter Breidahl thought. 


In his discussion with us, Peter Breidahl said he told the friend who had gone with him to the 
competition that he would go to New Zealand Police with his concerns about the Bruce Rifle 
Club. The friend cannot recall this. 
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Ina statement to New Zealand Police on 22 June 2019, his former partner recalled 

Peter Breidahl saying, about a week after the competition, that he had been to the Dunedin 
North Police station to make a complaint about what had happened during the competition. 
While his former partner could not remember what Peter Breidahl’s complaint was about, 
they remembered him saying that the person he spoke to had asked him to make a written 
statement, but he had declined to do so. He had felt his word was enough. The former 
District Arms Officer was based at the Dunedin Central Police station. The former partner 
told us it would have been unlikely that Peter Breidahl would have gone to the Dunedin 
Central Police station after his experiences there in June 2017. They also said that they 
would have remembered if Peter Breidahl had gone to the Dunedin Central Police station 
as previously, he had been critical of the former District Arms Officer in relation to those 
experiences. 


When speaking to us, Peter Breidahl was emphatic that his complaint had been made to the 
former District Arms Officer at Dunedin Central Police station and not at the Dunedin North 
Police station. 


Given what had happened on 27 and 30 June 2017, we think it unlikely that the former District 
Arms Officer would have forgotten if Peter Breidahl had, about five months later, made a 
complaint about the Bruce Rifle Club. And if such a complaint had been made, we think it 
also unlikely that the former District Arms Officer would not have recorded it or referred it on 
to a sworn police officer. 


Based on the evidence just described, we conclude that Peter Breidahl did not complain to 
New Zealand Police about the culture of the Bruce Rifle Club on 20 or 21 November 2017. 


5.6 Concluding comments 


We conclude that: 


a) the individual was not present at a competition held by the Bruce Rifle Club on 
19 November 2017; and 


b) Peter Breidahl did not complain to New Zealand Police about the culture of the 
Bruce Rifle Club on 20 or 21 November 2017. 


We are therefore satisfied that New Zealand Police did not hold information about the 
individual in relation to the Bruce Rifle Club before 15 March 2019. 


This is not to say, however, that the individual’s behaviour at the Bruce Rifle Club after 

he joined it was unremarkable. The individual shot while standing up, he went through a 
large amount of ammunition and his primary interest appeared to be firing and changing 
magazines quickly (see Part 4, chapter 5). As well, some members at least were aware of 
his firearms injury and were involved in discussion with the individual about large capacity 
magazines. 
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Chapter 6: What Public sector agencies knew 
about the individual before the terrorist attack 


6.1 Introduction 


As set out in chapter 1, our Terms of Reference required us to make findings on whether there 
was any information provided or otherwise available to relevant Public sector agencies that 
could or should have alerted them to the terrorist attack. 


We approached this question by asking all 217 Public sector agencies (see the appendix) to 
give us any information they held about the individual, looking at what information was held 
by Public sector agencies about the individual and considering whether such information 
could or should have alerted them to the terrorist attack. An agency with information that 
could or should have alerted it to the terrorist attack would be a relevant Public sector 
agency for the purposes of our inquiry. 


Ten Public sector agencies held information about the individual before the terrorist attack. 
We set out what information each agency knew about the individual, and what they did with 
that information, under each of the following headings: 


a) NewZealand Police. 

b) Immigration New Zealand. 

c) NewZealand Customs Service. 

d) Ministry for Primary Industries. 

e) NewZealand Post. 

f) Southern District Health Board. 

g) Accident Compensation Corporation. 
h) Ministry of Health. 

i) NewZealand Transport Agency. 


Jj) Parliamentary Service. 
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6.2 New Zealand Police 


Car accident 


New Zealand Police held information about a car accident that the individual had while 
driving in Whanganui on 6 May 2073 during a visit to New Zealand (see Part 4, chapter 2). 
The individual had pulled over onto a grass verge to let another vehicle drive past, but his 
vehicle rolled forward off the road and down the verge. New Zealand Police attended the 
accident and recorded the individual’s name and his address in Grafton, Australia and 

that he was involved in a single vehicle collision (meaning no other vehicles were involved). 
The individual was not charged and not issued with an infringement notice. 


Application for a New Zealand firearms licence 


New Zealand Police held copies of all the documents relating to the individual’s application 
for a New Zealand standard firearms licence, which the individual applied for on 1 September 
2017. These documents include his application form and the notes from interviews with the 
individual and his referees (gaming friend and their parent). 


New Zealand Police processed the individual’s firearms licence application. The former 
District Arms Officer granted his firearms licence on 16 November 2017. The individual’s 
licence details were added to the National Intelligence Application database (see 

Part 5, chapter 5). 


Firearms and ammunition purchases 


New Zealand Police held mail order forms for all the firearms and ammunition the individual 
purchased online. The former District Arms Officer (or their delegate) checked the 
information on each mail order form against the individual’s firearms licence details in the 
National Intelligence Application database. 


After confirming that the address on the form matched the address on the individual’s 
firearms licence, and that he was legally able to purchase the firearms and ammunition with 
his standard firearms licence, the former District Arms Officer (or their delegate) authorised 
the form and sent it to the seller to complete the purchases. This information was collected 
to authorise the purchase of the firearms and ammunition, not for the purpose of keeping 
records of firearms and ammunition purchases. 
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6.3. Immigration New Zealand 


International travel 


Immigration New Zealand held information about the individual’s full legal name, date 
of birth, nationality and passport. It held information about the 11 flights the individual 
took into and out of New Zealand. For each flight, it held information about the carrier, 
flight number, departure location and arrival location. 


Figure 39: The individual’s flights that Immigration New Zealand knew about 


Date 


12 July 1999 

22 July 1999 

28 March 2013 
29 May 2013 

17 August 2017 
16 January 2018 
31 January 2018 
30 May 2018 


5 June 2018 


17 October 2018 


28 December 2018 


Flight 

Brisbane, Australia to Auckland, New Zealand 
Christchurch, New Zealand to Brisbane, Australia 
Coolangatta, Australia to Auckland, New Zealand 
Auckland, New Zealand to Coolangatta, Australia 
Sydney, Australia to Auckland, New Zealand 

Auckland, New Zealand to Tokyo, Japan, via Hong Kong 
Tokyo, Japan to Auckland, New Zealand, via Hong Kong 
Dunedin, New Zealand to Brisbane, Australia 


Brisbane, Australia to Dunedin, New Zealand, via Christchurch, 
New Zealand 


Dunedin, New Zealand to Brisbane, Australia, via Christchurch, 
New Zealand 


Brisbane, Australia to Dunedin, New Zealand, via Christchurch, 
New Zealand 


Immigration New Zealand had information that the individual travelled to and from 

Japan with gaming friend in January 2018. Immigration New Zealand also had information 
that the individual did not travel with anyone else on any of his other flights from 

17 August 2017 onwards. 


Immigration New Zealand had the individual’s departure and arrival cards from his last two 


international flights in 2018. On his arrival card of 28 December 2018, the individual said that 
the country he spent the most time in while he was overseas was Poland. He also listed the 
countries he had visited in the last 30 days as Australia, Estonia, Latvia, Lithuania and Poland 
(see Part 4, chapter 4). 
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Immigration New Zealand ran the information it knew about the individual through its 
automated screening system every time he flew into New Zealand (from 28 March 2013 
onwards). This process raised no risks or issues about the individual. No agency ever raised 
a border alert against the individual and he was never subject to secondary processing at the 
border when he arrived in New Zealand. He was granted a resident visa and entry permission 
(or the equivalent under the Immigration Act 1987) each time he arrived in New Zealand. 


6.4 New Zealand Customs Service 


International travel 


New Zealand Customs Service knew the individual’s full legal name, date of birth and 
passport number. It held the same information as Immigration New Zealand did about the 
individual’s 11 flights into and out of New Zealand between 12 July 1999 and 28 December 
2018. It held information about how the individual was processed by New Zealand Customs 
Service officers each time he crossed the border. 


From 17 August 2017 onwards, New Zealand Customs Service knew the following additional 
information about each of the individual’s flights into and out of New Zealand: 


a) The individual’s contact details. 

b) When and where the flights were booked. 

c) The name of any other person the individual booked to travel with. 

d) Whether or not the individual paid for his flights and the method of payment. 
e) Any changes the individual made to his flights after they were booked. 

f) The individual’s connecting domestic flights. 

g) Whether the individual had any checked baggage. 


Like Immigration New Zealand, New Zealand Customs Service had information that the 
individual travelled to and from Japan with gaming friend in January 2018. It also had 
information that the individual did not travel with anyone else on any of his other flights 
from 17 August 2017 onwards. 


New Zealand Customs Service ran the information it knew about the individual through its 
automated targeting rules every time he flew into New Zealand from 28 March 2013 onwards, 
and every time he flew out of New Zealand from 28 September 2017 onwards. This process 
raised no risks or issues about the individual. 
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Exports and imports 

New Zealand Customs Service held information on one item that the individual exported 
from New Zealand on 15 September 2017 and 26 items that the individual imported into 

New Zealand between 31 October 2017 and 17 January 2019 using courier or fast freight 
services. Two of the items imported by the individual (ballistic ceramic plates and plastic 
boards) were used in the terrorist attack (see Part 4, chapter 5), although the descriptions of 
these items (“Ceramic Plate;2;pcs” and “Plastic Board;2;pcs”) available to the New Zealand 
Customs Service would not have raised concerns. 


New Zealand Customs Service ran its automated commodity-based alerts and rules-based 
targeting over all the items that the individual exported and imported. None of the items 
was prohibited or restricted or raised any other concerns. New Zealand Customs Service did 
not undertake any physical inspections of these imported or exported items. 


6.5 Ministry for Primary Industries 


The Ministry for Primary Industries held information on five of the items that the individual 
imported into New Zealand between 31 October 2017 and 17 January 2019. The descriptions 
of the goods were ambiguous, so they were flagged for further biosecurity risk assessment. 
These five items were a “zip”, a uniform, a digital camera and the ballistic ceramic plates and 
plastic boards that the individual used in the terrorist attack (see Part 4, chapter5). The 
descriptions of the ballistic ceramic plates and plastic boards (“ceramic plates” and “plastic 
boards”) available to the Ministry for Primary Industries would not have raised concerns. 


We cross-referenced the item listed by the Ministry for Primary Industries as a “zip” with 
New Zealand Customs Service’s list of items that the individual imported into New Zealand 
(see above 6.4 New Zealand Customs Service). New Zealand Customs Service’s list includes 
two items that the “zip” could be - a Zippo lighter or a Keller zip hoodie. 


The Ministry for Primary Industries assessed these five items but did not identify any 
biosecurity concerns. It cleared the items without physical inspection. 


6.6 New Zealand Post 


New Zealand Post held information about 29 items tracked and couriered to the individual 
at his home address in Somerville Street, Dunedin, between 26 August 2017 and 22 January 
2019. Some of these items (including firearms and the GoPro) were used by the individual in 
the terrorist attack. 
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6.7. New Zealand Transport Agency 


The New Zealand Transport Agency knew the individual’s full legal name and date of 
birth. It held information about the individual’s vehicle, including its make, model, 
colour, licence plate number, country of origin and that it had been earlier imported 
into New Zealand. It recorded the individual as the vehicle’s new owner and that the 
vehicle had been inspected and granted a Warrant of Fitness on 2 September 2018. 
It had information on the individual updating his address to Somerville Street on 

15 September 2017. 


The New Zealand Transport Agency also held information about two phone calls the 
individual made on 15 September 2017 and 9 February 2019. The first call was to change 
his address and the second was to enquire about converting his Australian Driver’s 
Licence to a New Zealand Driver’s Licence. New Zealand Transport Agency staff dealt 
with both of his phone queries. 


6.8 Southern District Health Board 


Steroid and testosterone use 


The Southern District Health Board held the individual’s name, date of birth, sex, address 
and National Hospital Index number. 


The Southern District Health Board held a copy of a letter (dated 20 December 2017) from 
Dunedin Hospital’s Endocrinology Service, responding to a referral from Dunedin South 
Medical Centre. The letter from the Endocrinology Service concerned the individual’s use 
of “excessive, unprescribed steroids and testosterone” (see Part 4, chapter 5). It included 
advice on potential treatment options and offered to meet with the individual if needed. 


Firearms injury 

The Southern District Health Board held copies of the individual's clinical notes from 

the injury he sustained on 13 July 2018 when a round of ammunition exploded while he 
was Cleaning his rifle barrel (See Part 4, chapter 5). These notes included the details 

of the individual’s visit to Dunedin Hospital’s Emergency Department, his referral to the 
inpatient Ophthalmology Service on 13 July 2018 and his follow-up appointments with the 
Ophthalmology Service on 16 July 2018 and 23 July 2018. In addition, the clinical notes 
included the individual’s phone number, marital status and contact details for his sister 
Lauren Tarrant. 


The individual’s injury was investigated and treated by an Emergency Department 
Registrar on 13 July 2018. The Registrar gave the individual an Accident Compensation 
Corporation claim form to fill out, so that the Southern District Health Board could be 
reimbursed for his treatment costs. The individual’s injury was investigated and treated 
by an Ophthalmology Registrar on 13 July 2018, 16 July 2018 and 23 July 2018. The 
Ophthalmology Registrar sent a letter advising Dunedin South Medical Centre about 
the injury and the individual’s treatment plan. 


366 


29 


30 


32 


33 


34 


6.9 Accident Compensation Corporation 


The Accident Compensation Corporation had the individual’s full legal name, date of 
birth, sex, National Hospital Index number, address and phone number. The Accident 
Compensation Corporation held a copy of the individual’s claim form for the treatment 
provided by the Southern District Health Board for his firearms injury on 13 July 2018. 

In the accident details section of the form, the individual wrote that he was doing 

“rifle maintenance” at the time of the accident and that the injury was caused by an 
“exploding cartridge”. The form also noted that the individual was an “overseas visitor” 
to New Zealand and that he was not in paid employment. 


The Accident Compensation Corporation wrote to the individual on 16 July 2018, stating 
that they would cover the cost of his treatment and they would pay his treatment provider 
directly. The Accident Compensation Corporation subsequently covered the cost of the 
individual’s treatment. 


6.10 Ministry of Health 


Steroid and testosterone use 

The Ministry of Health held data provided by the Southern District Health Board showing that 
Dunedin Hospital’s Endocrinology Service had written a plan of care for the individual, but 

it had no details on what the plan of care was for. No actions were taken by the Ministry of 
Health in response to this information. 

Firearms injury 

The Ministry of Health held data provided by the Southern District Health Board about the 


treatment the individual received for the injury he received on 13 July 2018. The Ministry of 
Health did not know that firearms caused the injury. 


The Ministry of Health had information: 


a) that the individual had been to Dunedin Hospital’s Emergency Department on 
13 July 2018; 


b) that the individual’s eye was injured and that the injury was caused by an explosion of 
“other materials”; 


c) about the details of the tests and prescriptions the individual received; and 


d) that the individual had been treated by the Dunedin Hospital Ophthalmology Service on 
13 July 2018, 16 July 2018 and 23 July 2018. 


No actions were taken by the Ministry of Health in response to this information. 
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Primary Health Organisation enrolment 


The Ministry of Health knew that the individual enrolled with WellSouth Primary Health 
Organisation on 12 February 2018 as his Primary Health Organisation. It also knew that 
Dunedin South Medical Centre was his previous general practice. No actions were taken by 
the Ministry of Health in response to this information. 


6.11 Parliamentary Service 


Email regarding the attack 
At just after 1.32 pm on 15 March 2019, the individual sent the following email to 34 recipients: 


Date: 15 March 2019, 1.32 pm 
From: [The individual] 
To: [34 recipients] 


Subject: On the attack in New Zealand today 


| was the partisan that committed the assault. | have 
attached my writings to explain my actions and beliefs 
as well as provided links to webpages to download the 
documents below. 





The individual’s 74 page manifesto was attached to the email and the email also included 
links to the file sharing websites that had copies of the manifesto. Although the email itself 
did not specify the targets of the terrorist attack, masajid in “Christchurch and Linwood” and 
Ashburton were identified as targets on page eight of the manifesto. 


Twenty-eight of the email’s recipients were media organisations or individuals working for 
media organisations. The remainder of the recipients included the Prime Minister’s Office 
and others in the New Zealand Parliament. Only one of the recipients - the Parliamentary 
Service - is a Public sector agency and so was within our Terms of Reference. 


A person in the Prime Minister’s Office called the Parliamentary Service’s Security Enablement 
Team at 1.38 pm to alert them to the email. The Prime Minister’s Office forwarded the email 
to the Security Enablement Team at 1.39 pm. The email sent directly to the Parliamentary 
Service was separately forwarded to the Security Enablement Team at 1.40 pm. 


The Parliamentary Service’s Security Enablement Team called New Zealand Police via111 
at 1.40 pm and forwarded the email to New Zealand Police’s National Command and 
Coordination Centre at 1.41pm. 
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Chapter 7: Evaluation of what Public sector agencies 
did with the information they had about the individual 


In this chapter we evaluate what Public sector agencies did with the information they held 
about the individual, under the following headings: 


a) The email to the Parliamentary Service just before the terrorist attack. 


b) Information held by border agencies about the individual’s travel in and out of 
New Zealand. 


c) The individual’s importation of ballistic ceramic plates and plastic boards, and possible 
importation of a helmet. 


d) The individual’s use of unprescribed steroids and testosterone, and his firearms injury. 


e) Other information held by Public sector agencies related to the individual’s planning and 
preparation. 


7.1. The email to the Parliamentary Service just before the 
terrorist attack 


Immediately before the terrorist attack on 15 March 2019 the individual sent an email to 
several recipients, including the Parliamentary Service. This email is reproduced in 
chapter 6. 


A draft Standard Operating Procedure, prepared by the Security Enablement Team of the 
Parliamentary Service in January 2019, outlines the assessment and escalation procedures 
for responding to threatening calls and emails to the New Zealand Parliament. Once alerted 
to the individual’s email, the Parliamentary Service responded in accordance with this 
operating procedure by alerting the correct authorities. 


The Parliamentary Service alerted New Zealand Police at 1.40 pm. This was eight minutes 
after the individual sent the email, and approximately the same time that the individual 
entered Masjid an-Nur (see Part 1, chapter 1). In that eight minutes, the Parliamentary 
Service had to: 


a) notice that the email had arrived; 
b) open the email and read it; 


c) conduct an initial assessment to determine whether the email was a genuine threat or 
was a hoax; 


d) determine that the email was a legitimate threat and follow the Standard Operating 
Procedure for response to a security incident; 
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e) open the individual’s manifesto and scan through its 74 pages to page eight, where 
the potential targets of the terrorist attack were identified; and 


f) contact New Zealand Police via 111 and provide the information collected about the 
threat. 


We consider that the Parliamentary Service acted appropriately in relation to the email within 
a period of time that was reasonable in the circumstances. 


7.2 Information held by border agencies about the individual’s 
travel in and out of New Zealand 


Between them, the border agencies (Immigration New Zealand and New Zealand 
Customs Service) held: 


a) the individual’s passport information (full legal name, date of birth, place of birth, 
citizenship, etc); 


b) the dates, times, arrival and destination locations of flights he took in and out of 
New Zealand from 1999 onwards; 


c) information indicating that he travelled with gaming friend from New Zealand to Japan 
and back in 2018; 


d) information that he otherwise travelled alone on flights in and out of New Zealand from 
August 2017 onwards; 


e) his arrival and departure cards for the last two international flights he took in 2018; and 


f) Advanced Passenger Processing and Passenger Name Record data in relation to the 
individual about his arrivals into New Zealand from March 2013 onwards and departures 
from New Zealand from 28 September 2017. 


Not all the information on the individual’s arrival and departure cards was accurate. It is not 
possible to determine whether the errors were intentional or not. When the individual filled 
out his departure card on 17 October 2018, he said he had not been living in New Zealand for 
more than 12 months - this was untrue, as he had been living in New Zealand since August 
2017. On his arrival card of 28 December 2018, he entered “student” as his occupation 
(which was not true) and did not include Austria among the list of countries he had visited 

in the previous 30 days (see Part 4, chapter 4). These errors were not known by Immigration 
New Zealand. 
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The border agencies did not hold information about the individual’s full travel history (see 
Part 8, chapter 8). Both border agencies ran the information they did have about the 
individual through their automated screening systems, and these processes did not identify 
any risks or issues about him. No agencies raised a border alert on the individual. The 
individual was never subject to secondary processing at the border, and all his interactions 
at the border with the agencies were routine. 


Accordingly, we see no issue with the actions taken by the border agencies in relation to 
the information they knew about the individual. 


7.3 The individual’s importation of ballistic ceramic plates and 
plastic boards, and possible importation of a helmet 


The individual imported two ballistic ceramic plates and two plastic boards on 28 December 
2017 and 17 January 2019 respectively. The sender in each case was the same. These items, 
as identified on the New Zealand Customs Service declaration, were neither prohibited nor 
restricted goods. There was nothing about the declared origins of the goods or the ways 

in which they were packaged, described or valued to attract suspicion. The individual had 
not been flagged as a person of interest. The two items were not randomly selected for 
inspection by New Zealand Customs Service. In 2019, New Zealand Customs Service dealt 
with 16.7 million import and export transactions. In this context, it is unsurprising that the 
ballistic ceramic plates and plastic boards were not physically inspected. 


As a result of inquiries made after 15 March 2019 by New Zealand Customs Service, it 
appeared likely that the ballistic ceramic plates were suitable for use in body armour and 
possible that the plastic boards were body armour parts. When we spoke to the individual, 
he acknowledged that these items were indeed body armour parts. There are legitimate 
uses for body armour, including for off-road motorcycling, and paintball and airsoft sports. 
For this reason, body armour is not subject to import restrictions. 


When we spoke to the individual, we asked him about the tactical helmet he wore during the 
terrorist attack. He said that he had imported it from the supplier of the body armour parts 
and that it had come into New Zealand labelled as a bicycle helmet. New Zealand Customs 
Service told us that none of the imports made by the individual were described as a bicycle 
helmet. He imported products described as bicycle fittings or sports goods on 27 February 
2018, 11 March 2018, 13 March 2018 and 27 March 2018. New Zealand Customs Service did 
not open and inspect any of these imported products, which is unsurprising given their 
descriptions. Inquiries carried out by New Zealand Customs Service since 15 March 2019 
have not been able to confirm whether any of these products were the tactical helmet the 
individual says he imported. We have examined the helmet. It is of a kind used for airsoft 
sports and is easily obtained in New Zealand. 


We see no issue with what New Zealand Customs Service did in relation to these items. 
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7-4. The individual’s use of unprescribed steroids and testosterone, 
and his firearms injury 


Use of unprescribed steroids and testosterone 


On 18 December 2017, a doctor from Dunedin South Medical Centre treated the individual for 
abdominal pain. The doctor referred the individual to the Endocrinology Service of Dunedin 
Hospital (a Southern District Health Board hospital), advising by letter that the individual had 
been taking oral steroids and injecting testosterone, and had hallmarks of steroid overuse. 
On 20 December 2017, the Endocrinology Service responded to the doctor by letter and 
offered various treatment options for the individual. The Southern District Health Board did 
not refer this information about the individual to New Zealand Police. 


The individual told us that the doctor had misunderstood what he had said during the 
consultation. He told us that he had not been taking steroids and testosterone, but 

rather drugs that had similar performance-enhancing effects that were manufactured in 
China. New Zealand Police have not been able to establish the source of these drugs 

(Part 4, chapter5). Our inquiries indicate that the individual may have acquired steroids or 
similar drugs online. Based on the information held by New Zealand Customs Service, none 
of his imports can be identified as the drugs he says he purchased. 


Whether he was taking steroids or testosterone or drugs that had similar effects is not 
relevant to whether this information should have been reported by the Southern District 
Health Board. For ease of discussion, we will put to one side the possibility that he was using 
substances that had similar effects and simply refer to “steroids and testosterone”. 


As we have explained, we see the individual’s use of steroids and testosterone as relevant to 
his preparation for the terrorist attack in terms of assisting him in bulking up and possibly 
also as imitating the preparation undertaken by the Oslo terrorist. 


The information provided by the individual to his doctor and referred to the Endocrinology 
Service was “personal information” as defined by the Privacy Act 1993. It was subject to 

the Health Information Privacy Code 1994 issued by the Privacy Commissioner.’ This Code 
sets out Health Information Privacy Rules that limit the collection, use and disclosure of 
information held by health agencies® - this includes not only agencies that provide “health or 
disability services”, but also others that are part of the health sector (such as the Accident 
Compensation Corporation and the Ministry of Health).’ 





5 Privacy Act 1993, section 2. 
S Health Information Privacy Code 1994, clause 5. 


7 Health Information Privacy Code 1994, clause 4(2). 
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Under Rule 11 of the Health Information Privacy Rules, a health agency can disclose health 
information if it believes it must do so to prevent a serious threat to public health, public 
safety or someone’s life.® Whether the threat can be considered serious relates to how likely 
it would be to occur, how severe the consequences would be and when it would occur.° 

A health agency can also disclose health information under Rule 11 if the information could 
relate to criminal offending.’° 


Rule 11 of the Health Information Privacy Rules reflects the “conditions of strict secrecy and 
confidentiality” that exist between medical practitioners and their patients." This duty of 
confidentiality is set out in the Code of Ethics for the Medical Profession produced by the 
New Zealand Medical Association.’ This means that, unless one of the narrow exceptions 
in Rule 11 applies, a medical practitioner cannot disclose a patient’s private information 
derived from a consultation or examination. 


The possession and use of unprescribed testosterone and anabolic steroids are offences 
under section 43 of the Medicines Act 1981. Rule 11 of the Health Information Privacy 
Rules permits disclosure to avoid prejudice to the maintenance of the law by public 
sector agencies. But this rule does not impose a duty on medical practitioners to disclose 
information to New Zealand Police about all offending they become aware of. 


We have taken advice from Dr Elaine Barrington-Ward, a Senior Medical Officer and Clinical 
Leader in the Endocrinology and Diabetes Department at Wellington Hospital, an expert 

in steroid and testosterone use. She told us that, in the absence of concerns about other 
criminal activity, she would be unlikely to refer the use of steroids and/or testosterone to 
New Zealand Police. 


Based on that advice, we are satisfied that the information supplied by the individual to the 
doctor and forwarded to the Endocrinology Service was properly seen as not warranting 
disclosure to New Zealand Police. Accordingly, we consider that there was no reason for 
the Southern District Health Board to refer the information they held about the individual to 
New Zealand Police. 


Firearms injury 

The individual’s right eye and thigh were injured in a firearm accident on 13 July 2018 (see 
Part 4, chapter 5). He was treated at the Emergency Department of Dunedin Hospital (a 
Southern District Health Board hospital). The individual told the Emergency Department 
Registrar that the injury was caused by a round of ammunition exploding while he was 
cleaning a rifle barrel. The Southern District Health Board did not refer this incident to 
New Zealand Police. 





Health Information Privacy Code 1994 clause 5, rule 11(2)(d). 


8 This definition is for the purposes of corresponding principles provided for in the Privacy Act but we see it as applicable to 
the Health Information Privacy Principles. 


Health Information Privacy Code 1994 clause 5, rule 11(2)(i)(i). 
"Law Commission Evidence Law: Privilege (NZLC PP23, 1994) at page 293. 


New Zealand Medical Association Code of Ethics for the New Zealand Medical Profession (2014) at pages 4 and 6. 
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The Southern District Health Board does not have an explicit policy or protocol that outlines 
what to do in the event of firearms-related injuries. But, as we have explained, health 
authorities must abide by the Health Information Privacy Code. 


The Registrar who treated the individual’s firearms injury told us that they considered 

the accident to have been careless and a little unusual, but also said the individual was 
unremarkable and had not acted in an agitated manner. Considering the individual’s 
behaviour and the explanation he gave for how the injury was sustained, the Registrar 
believed the injury was an accident (in other words, was self-inflicted but not a suicide 
attempt). The Registrar could not recall if they were aware of the referral that had been 
made to the Endocrinology Service about the individual’s steroid and testosterone use. 
The Registrar told us that, even if they had been aware of the individual’s steroid and 
testosterone use, they would not have seen it as appropriate to disclose the firearms injury 
to New Zealand Police. This is because the individual did not display outwardly aggressive 
or unusual behaviour and gave what the Registrar saw as a credible explanation for how the 
injury occurred. 


The explanation the individual gave to the Registrar, as recorded in the clinical notes, is that 
the accident occurred while the individual was cleaning the rifle. He gave more detailed 
explanations to members of the Bruce Rifle Club and discussed what may have been this 
incident with gaming friend. Although their recollections of his explanations are not precisely 
the same, there were enough similarities (in terms of where the bullet went and what injury 
was incurred) to provide a reasonable basis for understanding what happened. 


A round of ammunition was jammed in the partially open breech of the rifle. The bullet was 
lodged in the barrel but some or all of the cartridge case was exposed. The individual’s 
efforts to free the round caused the primer on the cartridge to come into contact with the 
firing pin of the rifle. The charge was ignited, which resulted in the bullet being fired through 
the barrel of the rifle and into the roof and the exposed cartridge case exploding in the 
breech. Fragments of the cartridge case caused the individual’s injury. 


This explanation invites a question as to what the individual was doing at his home with a 
rifle that had a round jammed in the breech. A possible answer to this question is that he 
may have been practising at home with his large capacity magazines (something he could not 
easily do at the Bruce Rifle Club, at least if others were present, because he was not legally 
allowed to do so). We put this possibility to the individual. He said that he had, indeed, 
practised at home with large capacity magazines but that they were always empty. He said 
that he had been trying to resolve a problem associated with what he thought was a burr in 
the barrel by chambering a round. The round had jammed. His attempts to free the round 
were based on the erroneous assumption that the rifle had an operational “drop safe” safety 
feature and resulted in contact between the firing pin and the primer. We consider that 

the individual’s explanation is reasonably plausible, a conclusion that was also reached by 
the New Zealand Police Armourer, but we do not discount the possibility that he had been 
practising with full large capacity magazines. 
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The individual told us he had been worried about the incident coming to the attention of 
New Zealand Police but the significance of the injury to his eye meant that he had no practical 
alternative but to go to the hospital. 


Under the Arms Act 1983 (section 58), there is an obligation on “every person who causes 
bodily injury to or the death of any person by the use of a firearm” to report the incident in 
person to New Zealand Police “as soon as reasonably practicable”. It is doubtful whether this 
applies to a self-inflicted accidental injury."* But, even if it does, the individual was entitled 
to seek immediate medical treatment before reporting the injury. This means that at the time 
the Registrar engaged with him, the individual would not have been in breach of the reporting 
obligation, even if he was subject to it. 


In causing the firearm to discharge, the individual may well have committed offences under 
the Arms Act, such as discharging a firearm in a dwelling house without reasonable cause 
so as to endanger property and himself (section 48), and careless use of a firearm causing 
bodily injury (section 53). It is not clear whether the Registrar was aware that the incident 
occurred in the individual’s home. 


For reasons very similar to those expressed in relation to the individual’s steroid and 
testosterone use, we do not consider that the Southern District Health Board was remiss in 
not reporting the accident to New Zealand Police. As one doctor told New Zealand Police in 
an interview, “it is not uncommon to treat a person with a minor injury from an accidental 
discharge” from a firearm. More generally, we consider that, as a clinician treating a patient 
for an injury, the Registrar was not obliged to turn their mind to the details of the Arms Act. 
Even if they had done so, we do not consider that the circumstances the Registrar was aware 
of would have dictated disclosure to New Zealand Police under the current rules. 


Information regarding the incident was referred by the Southern District Health Board to 
the Accident Compensation Corporation. All the Accident Compensation Corporation knew 
about the individual’s injury was that he received it from “Rifle maintenance - exploding 
cartridge *** Leisure/hobby or play *** Impact with a sharp object”. 


The Accident Compensation Corporation does not have a policy requiring notification to 
New Zealand Police if a claim is received relating to a firearm injury. Its information sharing 
is governed by the Privacy Act and the Health Information Privacy Code. For reasons that 
substantially overlap those already given in relation to the Southern District Health Board, 
but that are even more compelling given the limited nature of the information, we are 
satisfied that there was no reason for the Accident Compensation Corporation to report the 
incident to New Zealand Police. 





3 Academic commentary on the offence suggests that it does not “require the reporting of the accidental shooting of oneself”. 
See Adams on Criminal Law - Offences and Defences (online ed, Thomson Reuters) at AA58.01. 
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Although we see no fault in the way in which this information was dealt with by the Southern 
District Health Board and the Accident Compensation Corporation, consideration should be 
given to requiring automatic reporting of firearms injuries. Such an injury may say something 
about the fitness of a person to hold a firearms licence and this is particularly so if there 

is a history of similar incidents. In the absence of a reporting requirement or practice, 

such information will often not come to the attention of New Zealand Police, who remain 
responsible for administering firearms licensing. 


7-5 Other information held by Public sector agencies related to the 
individual’s planning and preparation 


The only other information held by Public sector agencies that was clearly relevant to the 
individual’s planning and preparation for the terrorist attack was: 


a) the documentation relevant to his application for a firearms licence held by New Zealand 
Police; 


b) mail order forms held by New Zealand Police that confirmed his status as a licence holder 
and thus authorised online purchases of firearms and ammunition; and 


c) courier records relating to deliveries held by New Zealand Post. 


Part 5: The firearms licence sets out our review of the process that resulted in the individual’s 
application for a firearms licence being granted and our findings about New Zealand Police’s 
actions in response to his firearms licence application. We see no issue with New Zealand 
Police’s actions in response to the mail order forms for firearms and ammunition. As the 
individual’s firearms licence had already been granted, he was legally entitled to purchase 
firearms and ammunition. 


We see no issue with New Zealand Post’s actions in delivering the individual’s couriered 
items. 


None of the other information held by Public sector agencies about the individual was 


material to his preparation for, and planning of, the terrorist attack. 


7.6 Concluding comments 


The email to the Parliamentary Service was received too late to enable disruption of the 
terrorist attack. None of the other information held by Public sector agencies could or 
should have alerted them to the terrorist attack. 
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Chapter 8: Findings 


Our Terms of Reference required us to make findings on: 


4(a) whether there was any information provided or otherwise available to relevant [Public] 
sector agencies that could or should have alerted them to the terrorist attack and, if 
such information was provided or otherwise available, how the agencies responded to 
any such information, and whether that response was appropriate; and 


(b) the interaction amongst relevant [Public] sector agencies, including whether there was 
any failure in information sharing between the relevant agencies. 


“The terrorist attack” means the terrorist attack carried out by the individual in accordance 
with his planning and preparation over the previous years. We do not see general indications 
of the risk of terrorism from the extreme right-wing as relevant to this question. Such 
indications are relevant to other issues on which we must make findings and are addressed 
later in the report (see Part 8: Assessing the counter-terrorism effort). 


We have concluded that the only information about the individual that was known by 

New Zealand Public sector agencies before 15 March 2019 that could or should have alerted 
them to the terrorist attack was the email sent to the Parliamentary Service. The effect of 
this is that there were no interactions amongst the relevant Public sector agencies before 
15 March 2019 that were relevant to the terrorist attack. 


We find that: 


a) the Parliamentary Service acted appropriately within a period of time that was 
reasonable in the circumstances in response to the email sent just before the terrorist 
attack; 


b) there was no other information provided or otherwise available to any relevant Public 
sector agency that could or should have alerted them to the terrorist attack; and 


c) there was no failure in information sharing between the relevant Public sector agencies. 
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Chapter 9: Questions asked by the community 


Why was the individual not checked more thoroughly when he entered New Zealand? 


Australian citizens and residents such as the individual are routinely screened by Immigration 
New Zealand through an automated system when they check in for a flight to New Zealand. 
They are generally not manually screened at the border, as they are eligible for a resident visa 
upon arrival in New Zealand. The exception to this is if there is something about a person’s 
profile that is suspicious from an immigration perspective, for example, their passport is 
suspected as being fraudulent. 


No Public sector agency raised a border alert against the individual and he was not subject to 
additional processing by Immigration New Zealand at the border. He was therefore granted a 
resident visa and entry permission (or the equivalent under the Immigration Act 1987) every 
time he arrived in New Zealand. 


New Zealand Customs Service ran automated targeting rules across the data they held about 
the individual every time he flew into New Zealand from 28 March 2013 onwards and out of 
New Zealand from 28 September 2017 onwards. This did not identify any risks or issues. The 
individual was not subject to additional processing at the border. 


See Part 8, chapter 8 for more information about the role of border agencies (Immigration 
New Zealand and New Zealand Customs Service) in New Zealand’s counter-terrorism effort. 


Did New Zealand agencies know all the countries the individual travelled to? If not, 
why not? 

The details of the individual’s travel that were available to the border agencies (Immigration 
New Zealand and New Zealand Customs Service) did not provide them with full information 
about his travel history each time he came into New Zealand. Technical and data sharing 
difficulties mean that Immigration New Zealand generally does not hold a person’s full travel 
history (see Part 8, chapter 8). 


Why didn’t the individual’s donations to extreme right-wing organisations raise alerts 
in the anti-money laundering system? 


New Zealand Public sector agencies did not hold any information about the individual’s 
donations to extreme right-wing organisations before 15 March 2019. This is because they 
did not receive any alerts of suspicious activity about the donations. 


As the donations were made from the individual’s Australian bank accounts, New Zealand 
reporting entities (as defined in the Anti-Money Laundering and Countering Financing of 
Terrorism Act 2009) did not know about them. 


Even if they had known about the individual’s donations, a reporting entity, such as a bank, 
would need to have reasonable grounds to suspect that the donations may be relevant to 
detecting an offence before they could report this information. Donations to a political 
organisation (including an extreme right-wing organisation) would not, in and of themselves, 
reach the reporting threshold under the legislation. 
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Have New Zealand Police ever received complaints about, or investigated the 
Bruce Rifle Club or any of its members? 


New Zealand Police did not receive any complaints about the Bruce Rifle Club before 
15 March 2019. This is discussed in chapter 5 of this Part. 


Why did the Royal Commission ask 217 Public sector agencies whether they held 
information about the individual before 15 March 2019? 


Our Terms of Reference defined relevant Public sector agencies as “New Zealand Security 
Intelligence Service, Government Communications Security Bureau, New Zealand Police, 
New Zealand Customs Service, Immigration New Zealand, and any other agency whose 
functions or conduct, in the inquiry’s view, needs to be considered in order to fulfil the 
inquiry’s Terms of Reference”. 


We asked all 217 Public sector agencies, not just the five agencies named in our Terms of 
Reference, whether they held any information about the individual. We did this to ensure 
that we had a complete picture of what was known by all Public sector agencies about the 
individual and his activities before the terrorist attack. 
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Glossary 


Term 


Barry Harry Tarry 


Definition 


Social media username used by the individual. It is a variation 
that corresponds to the individual's initials. 





Da’ish 


The Arabic acronym for the Islamic State of Iraq and the 
Levant (ISIL), also known as the Islamic State of Iraq and Syria 
(ISIS). An Islamist extremist terrorist organisation. 





Digital Subscriber Line 
(DSL) 


An internet connection that transmits digital data using 
telephone lines. 








endocrinology A branch of medicine that deals with the diagnosis and 
treatment of hormone problems, such as diabetes. An 
endocrinologist is a doctor who specialises in the diagnosis 
and treatment of hormone problems. 

Five Eyes The intelligence sharing partnership between Australia, 


Canada, New Zealand, the United Kingdom and the United 
States of America. 





hostile reconnaissance 


Gathering information about the security levels and layout of 
a building and/or the usual activities of people in the building. 
An activity sometimes carried out by a person planning 

a terrorist attack. 





intelligence and 
security agencies 


The Government Communications Security Bureau and the 
New Zealand Security Intelligence Service. This is a statutory 
term under the Intelligence and Security Act 2017. 





Internet Protocol 
address (IP address) 


A unique number linked to each device connected toa 
computer network that uses the Internet Protocol for 
communication. 





masajid 


An Arabic term for more than two masjid. 





masjid 


An Arabic term for a mosque, the Muslim place of worship. 
In Arabic, masjid literally translates to “place of prostration 
(in prayer)”. 





Masjid an-Nur 


An Arabic term for the an-Nur Mosque. 





meme 


An image, video or piece of text, typically humorous in nature 
that is spread via the internet, often through social media. 
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Term 


New Zealand Intelligence 
Community 


Definition 


The Government Communications Security Bureau, the 
New Zealand Security Intelligence Service and the National 
Security Group of the Department of the Prime Minister and 
Cabinet (including the National Assessments Bureau). 





nexus 


A connection. 





ophthalmology 


A branch of medicine that deals with the diagnosis and 
treatment of eye diseases and vision problems, such as 
cataracts. An ophthalmologist is a doctor who specialises 
in the diagnosis and treatment (including surgery) of eye 
diseases and vision problems. 





Public sector agency 


In general, an organisation that works for the government 
of New Zealand. 


In this report, “Public sector agencies” means the 
217 organisations listed in the appendix. 





Oslo terrorist 


An individual born and raised in Oslo, Norway who committed 
a terrorist attack in Oslo and on Utaya Island, Norway on 
22 July 2011. 





Registrar 


A doctor working in a hospital who is training in a specialised 
field of medicine. 





Secure Digital card 
(SD card) 


A digital storage card used in portable electronic devices. 





Tor browser 


Software that allows users to surf the web anonymously by 
concealing the user’s location as well as what they are looking 
at online. It can also be used to access the dark web. 





Virtual Private Network 
(VPN) 


Software that allows the user to create a secure connection 
to another server over the internet. Once connected, the 
user can browse the internet using that server. In doing so, 
the user is provided with an Internet Protocol (IP) address 
associated with the different server, which hides the user’s 
location. 
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Part 7 


Detecting a potential terrorist 


Chapter1 - Introduction 
Chapter 2 - The three ways the individual may have been detected 
Chapter 3 - Looking forward 


Glossary - Terms commonly used in Part 7 
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Chapter 1: Introduction 


The detection of potential terrorists is difficult. A state that upholds the civil and political 
freedoms of a democratic society cannot know the intentions of all individuals who engage 
with extremist ideologies, including those leaning towards violent action. So, with limited 
resources, counter-terrorism agencies have to make tough choices about where to focus 
their intelligence efforts. Professor Michael Clarke, the former Director-General of the 
United Kingdom’s Royal United Services Institute, put it this way: 


One will be astonished at how little agencies can do, because it takes so much human 
energy to go down one track. The idea that the state somehow has a huge control centre 
where it is watching what we do is a complete fantasy. The state and [the Government 
Communications Headquarters, the United Kingdom’s signals intelligence agency] have 
astonishingly good capabilities, but it is as if they can shine a rather narrow beam into 
many areas of cyberspace and absorb what is revealed in that little narrow beam. If they 
shine it there, they cannot shine it elsewhere.’ 


Although such detection is difficult, it can be, and often is, achieved and has resulted in the 
disruption of many intended terrorist attacks around the world. 


For the reasons we have given in Part 6: What Public sector agencies knew about the 
terrorist, we are satisfied that, leaving aside the email to the Parliamentary Service, there 
was no information available to the relevant Public sector agencies that could or should 
have alerted them to the terrorist attack. In Part 8: Assessing the counter-terrorism effort 
we consider, amongst other issues, why information about the individual’s planning and 
preparation did not come to the attention of the counter-terrorism agencies. In this Part, 
we provide an introduction to that evaluation. Some knowledge of the content discussed in 
Part 4: The terrorist and Part 6: What Public sector agencies knew about the terrorist is 
necessary to make sense of this Part. Readers may wish to familiarise themselves with 
those Parts first. 
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' Draft Investigatory Powers Bill HC 651 (2 December 2015) (joint committee report) http://data.parliament.uk/writtenevidence/ 
committeeevidence.svc/evidencedocument/draft-investigatory-powers-bill-committee/draft-investigatory-powers-bill/ 
oral/25685.html. 
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Chapter 2: The three ways the individual may 
have been detected 


The terrorist attack on 15 March 2019 was the result of careful planning and extensive 
preparation by the individual, carried out over a period of approximately 18 months. 

As a financially independent white male in his late 20s who was able to engage with others 
in unthreatening ways, the individual was not likely to be viewed with suspicion. And, as 

an Australian, he was able to fit into New Zealand reasonably well and did not draw much 
attention to himself. He was a lone actor who did not need to engage with others to prepare 
for his terrorist attack. He had no close associates to whom he was likely to talk about his 
plans. And, although there were occasional lapses, he generally attempted to maintain 
operational security. 


Against this background and based on the information available to us, there are three ways 
in which the individual may have come to the attention of relevant Public sector agencies: 


a) The Barry Harry Tarry comments on the private The Lads Society Season Two Facebook 
page (see Part 4: The terrorist) and possibly other comments of which we are not 
aware may have been identified through tip-offs or other mechanisms and linked to 
the individual. 


b) A tip-off from amember of the public about the individual’s conduct (the likelihood 
of which would have been enhanced if New Zealand had adopted a public-facing “see 
something, say something” policy) may have resulted in inquiry by the counter-terrorism 
agencies. 


c) Amore extensive system of data aggregation, analysis and reporting might have captured 
pieces of information which, taken together, may have been sufficient to trigger an 
investigation (if only into whether the individual was a fit and proper person to hold 
a firearms licence). 


We briefly discuss each of these in turn. 


2.1. The Barry Harry Tarry comments 


The Barry Harry Tarry comments were made on the private The Lads Society Season Two 
Facebook page. Although these comments did not come to the attention of New Zealand 
counter-terrorism agencies, there are a number of ways they could have (for example, 

a tip-off from a member of the public). This being so, we have given some thought to what 
would have resulted if the counter-terrorism agencies had become aware of them. 
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The views expressed on the Facebook page by members were generally right-wing and 
many were IsLamophobic in character. Some of the comments were premised on the view 
that Muslim communities pose an existential threat to Western societies, which perhaps 
can only be successfully resisted by violence. Views of this sort are commonly expressed 
on the internet, often anonymously (see Part 2, chapter 5). Although willing to engage in 
dehumanising and divisive rhetoric against “others”, those expressing such views are usually 
careful to avoid direct endorsement of violence. Such talk is harmful to an inclusive society 
whether the discussion is ironic, grandstanding or reflects an intent to commit a violent 
act. But there are legal, logistical and technical obstacles to counter-terrorism agencies 
conducting operations on far right internet sites on the scale necessary to pick up such 
comments and identify the people who make them. There are further practical difficulties 
in distinguishing between those who are just talkers and the potential doers (that is, those 
likely to mobilise to violence). 


On the basis of the internet material we have seen, the individual’s comments were a lapse 
from his attempts to maintain operational security. 


The comments in relation to the Islamic school provided or implied a number of 
identifiers - membership of a particular gym in Dunedin, involvement with an Australian 
group suggesting a possible Australian connection and a username (Barry Harry Tarry) 
that bore some resemblance to the individual’s name. One of the gym members knew 
the individual as “Barry” and for a time was his Facebook friend. It follows that inquiries 
at the gym - not requiring any form of warrant - would, in all probability, have linked the 
individual to the comments. 


The comments also gave indications of his thinking. Even without the benefit of hindsight, 
there is a chilling quality to his final remarks. 


We spoke to counter-terrorism professionals as to whether the comments, if they had 
come to official attention, would have warranted inquiry at the gym. Given what is often 
said in internet discussions, the comments were described to us as not being remarkable. 
Our assessment of the likelihood of such inquiry identifying Barry Harry Tarry is 
hindsight-based (that is, based on what we now know). The likely success of such inquiry 
would not have been so apparent at that time. Concerns were expressed as to whether 
such inquiry would have been appropriate (or proportionate) given the privacy implications 
of disclosing private Facebook comments to those who would have been spoken to at the 
gym. A decision whether to make further inquiry may have been influenced by the extent 
to which other comments made by the individual on the Facebook page also came to the 
attention of the counter-terrorism agencies. This issue being hypothetical - as the comments 
did not come to official attention - there is no need for us to express a conclusion on it. 

We touch on this point again in Part 8: Assessing the counter-terrorism effort. 
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If the individual had been identified as the author of the Facebook comments, a check of the 
New Zealand Police National Intelligence Application would have revealed that he held a 
firearms licence. The combination of possible intent (as indicated by the comments) and 
capability (as revealed by his firearms licence) may have justified further investigation, 
perhaps initially as to his suitability to hold a firearms licence. Whether such investigation 
would have resulted in the disruption of the terrorist attack is necessarily speculative. It is, 
however, distinctly possible that this might have happened. 


2.2 A tip-off from a member of the public 


The individual’s shooting style at the Bruce Rifle Club was sufficiently unusual to be noted by 
some of the members. As well, there were other aspects of the individual’s conduct at the 
club that came to the attention of some members and may have led to a tip-off, including the 
injury he suffered and comments he had made in relation to large capacity magazines. 


A tip-off in relation to the drone-flying incident was also possible. A member of the public 
who had seen the drone flying over Masjid an-Nur on 8 January 2019 took a note of it. When 
interviewed by a police officer on 22 May 2019 they were able to identify the correct date of 
the incident and give a time for it that was within minutes of when it happened. That witness 
saw only the drone and not the person who was flying it and thus had no opportunity to 
identify the individual as the drone operator or take the details of the number plate of his car. 
The witness did not report the incident at the time. 


The flight path of the drone shows that the individual had operated it from Hagley Park. He 
told us that he had parked his car beside Hagley Park and used a remote control to fly the 
drone while he stood in the park. It was a summer evening and there must have been many 
people walking in Hagley Park in the vicinity of the individual. Some may have observed what 
he was doing. A member of the public who was concerned by this might have reported the 
incident to the counter-terrorism agencies. If accompanied by the details of the number 
plate of his car or perhaps a photograph of the individual, such a report would have been 
actionable. 


As many Muslim individuals have observed to us, an identifiably Muslim person who acted in 
the same way as the individual would likely be reported to the counter-terrorism agencies. 
This is because of the general level of scrutiny Muslim communities are subjected to by 
society and the counter-terrorism agencies, and the associated widespread tendency to see 
Muslim individuals as potential terrorists.’ 





? See Diala Hawi, Danny Osborne, Joseph A Bulbulia and Chis G Sibley “Terrorism Anxiety and Attitudes toward Muslims” (2019) 48 
New Zealand Journal of Psychology at page 86. 
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“See something, say something” policies identify for the public behaviours that have been 
known to be associated with preparation for terrorist acts and encourage the public to 
report such behaviours to counter-terrorism agencies. Such policies have been adopted ina 
number of countries. The United Kingdom has an Action Counters Terrorism (ACT) campaign, 
which encourages the public to report suspicious behaviour to the police. The campaign 
features a series of information films, helping the public to understand how to report, what 
happens when they report and what signs to look out for. In 2018, the campaign achieved 
3.8 million views of its counter-terrorism awareness film and reached over 11.26 million 
people through police social media channels. Within the first week of the campaign, the 
average number of online public reports doubled. 


Since 2015, the federal government of the United States of America has produced an annual, 
publicly available booklet titled Homegrown violent extremist mobilization indicators. It 
describes various observable behaviours (indicators) that “could help to determine whether 
individuals or groups are preparing to engage in violent extremist activities”.’ Indicators are 
grouped in terms of the extent to which the behaviour demonstrates an individual’s likelihood 
of engaging in terrorist activity. 


Families and civil society can play an important role in relation to these types of policies 

and guidelines. That is because those closest to someone - partners, brothers, sisters, 
mothers, fathers, friends, teachers, doctors - may be the first to notice changes in behaviour 
that are indicative of radicalisation. Without the guidance a “see something, say something” 
policy provides, the significance of such changes may not be apparent to those who observe 
them.* And even if it is apparent, people may not know where to turn for help, or may be 
reluctant to do so. Many people will understandably hesitate to report a family member 

to counter-terrorism agencies. So in some countries there are services independent of 
government that help people who know someone who may be heading towards violent 
extremism. One example is the Step Together organisation in New South Wales, Australia. 

It is an early intervention service that provides advice, information and referrals to services 
that can help before anything dangerous happens. Only in the event of a serious or imminent 
risk is the organisation obliged to report the situation to authorities.°® 





3 The Department of Homeland Security, the Federal Bureau of Investigation and the National Counterterrorism Center Homegrown 
Violent Extremist Mobilization Indicators: 2019 edition (2019) at page 2. 


4 Michele Grossman “The role of families and civil society in detecting radicalisation and promoting disengagement from violent 


extremism” in C Echle, R Gunaratna, P Ruieppel and M Sarmah (eds) Combating violent extremism and terrorism in Asia and Europe: 


From cooperation to collaboration (Singapore, Konrad-Adenauer-Stiffung Ltd, 2018) at pages 158-162. 
5 Step Together website About Step Together https://steptogether.com.au/about-our-helpline-avoid-violent-extremism/. 
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A public-facing, threat-agnostic “see something, say something” policy would have enhanced 
the likelihood of the individual’s conduct being reported, particularly if such a policy had 
identified behaviours consistent with terrorist training (for instance, unusual shooting styles). 
It is, of course, possible that had there been such a policy, the individual may have tailored 
his behaviour accordingly so as not to arouse suspicion, though this would have limited 

his ability to develop relevant firearms-handling experience. Or it might have made the 
individual less likely to see New Zealand as a suitable location for his terrorist attack. We 
will revert later in this report to the utility of a public-facing “see something, say something” 
policy. At this point we note that care would be required in identifying behaviours of the 

kind that warrant reporting. Even if expressed in threat-agnostic terms, a New Zealand “see 
something, say something” policy would, at least before 15 March 2019, probably have had 
the practical effect of increasing public suspicion of Muslim individuals and communities. 


2.3 Amore extensive system of data aggregation, analysis 
and reporting 


Some Public sector agencies had discrete pieces of information about the individual that 
related to his preparation. These were the importation of ballistic ceramic plates and 
plastic boards, steroid and testosterone use and the firearms injury. The individual pieces 
of information, if viewed in isolation, were of limited significance, at least in terms of likely 
terrorist activity. But the information illustrates the sort of data which, if aggregated with 
other information available (most particularly that the individual held a firearms licence), 
may have been seen as warranting inquiry. And the more information that could be brought 
into such an aggregation exercise (for instance a registry of firearms and ammunition 
purchases) the more effective it would be. It is worth pointing out that some large-scale 
data aggregation currently takes place between Public sector agencies, for example between 
some Public sector agencies to allow people to be detained at the border for unpaid fines or 
significant and outstanding student loan debts. 


Many New Zealanders accept (at least implicitly) that their data is collected and analysed by 
private companies such as Facebook and Google. But large-scale data aggregation by the 
state is seen as a different matter altogether. The key feature of bulk data collection is that a 
large proportion of the data gathered relates to people who are not intelligence targets and 
is of no intelligence value. In other countries, where counter-terrorism agencies have access 
to bulk data, selectors are applied to the data to filter out what is irrelevant for national 
security purposes before human eyes review what is produced. Whether the New Zealand 
public would be prepared to accept data aggregation and analysis on the scale and basis just 
suggested is uncertain. 
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Public opinion changes over time. Informed public debate would allow Public sector 
agencies to share their work, capabilities and approach with New Zealand communities. 

It would also facilitate a discussion on the safeguards and oversight that would be required 
to strike the right balance between privacy and public safety. Such discussion would allow 
Public sector agencies to gauge their social licence to operate and build trust in their work, 
role and responsibilities over time. 


More limited and less controversial changes associated with data reporting may be an easier 
place to start. A report to New Zealand Police that the individual had injured himself in the 
accidental discharge of a firearm in his flat (which had a common wall with his neighbours) 
would not have triggered suspicions of terrorism. But it might have raised an issue as 

to whether the individual was a fit and proper person to have a firearm. In the ordinary 
course of events, this would have been investigated by New Zealand Police. Where such 

an investigation would have led is, of course, unclear. Similar considerations might apply 

to his steroid and testosterone use, but in relation to this, privacy considerations might be 
thought to be the overriding consideration. To be more specific, it would be difficult to justify 
requiring a health professional to report a patient to New Zealand Police about steroid and 
testosterone use against the off-chance that the patient has a firearms licence. 
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Chapter 3: Looking forward 


We have examined the ways the individual might have been detected by Public sector 
agencies. Although he was not detected, this does not mean that all lone actors cannot be 
detected. An effective counter-terrorism effort can enhance the likelihood of terrorist attacks 
being prevented in the future.® With this in mind, in the next Part of our report we examine 
relevant aspects of New Zealand’s counter-terrorism effort - from political leadership 

to operations. This includes analysis of the shifting terrorism threat environment (both 
international and domestic) and how the relevant Public sector agencies have understood 
and responded to that environment. 





& One study found that 80 percent of disrupted terrorist attacks in the United States of America between 1999 and 2009 were 
initially discovered by local or State law enforcement or the general public. See K Strom et al Building on clues: examining 
successes and failures in detecting US terrorist plots, 1999-2009 (Institute for Homeland Security Solutions, Durham, North 
Carolina, 2010). 
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Glossary 

Term Definition 

counter-terrorism New Zealand Police and the New Zealand Security Intelligence 

agencies Service. 

data aggregation Combining data from various sources and presenting it ina 
summarised format. 

operational security Awareness and minimisation of behaviours that might attract 


attention from Public sector agencies. 
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Chapter 1: Introduction 


Earlier in our report we explored what relevant Public sector agencies knew about the 
individual (see Part 6: What Public sector agencies knew about the terrorist). We concluded 
that the relevant Public sector agencies involved in the counter-terrorism effort did not hold 
information on the threat posed by the individual and of his planning and preparation for the 
terrorist attack on 15 March 2019. In Part 7: Detecting a potential terrorist, we explored the 
ways in which the individual could have come to the attention of the relevant Public sector 
agencies, but did not. 


In this Part we focus on what we call the counter-terrorism effort - that is how Public sector 
agencies detect terrorists and disrupt their organisation, planning, preparation and attacks. 
This Part looks at the continuum of counter-terrorism roles and activity (including countering 
violent extremism). The promotion of social cohesion and social inclusion, which supports 
any broad comprehensive counter-terrorism strategy, is discussed in Part 9: Social cohesion 
and embracing diversity. 


Our Terms of Reference required us to make findings on: 
4(c) whether relevant [Public] sector agencies failed to anticipate or plan for the terrorist 


attack due to an inappropriate concentration of counter-terrorism resources or 
priorities on other terrorism threats; 


(d) whether any relevant [Public] sector agency failed to meet required standards or was 
otherwise at fault, whether in whole or in part; and 


(e) any other matters relevant to the purpose of the inquiry, to the extent necessary to 
provide a complete report. 
We also had to consider whether to make recommendations about the counter-terrorism 
effort. 
In the following chapters of this Part we discuss: 


a) the setting in which the counter-terrorism effort has operated over the past two decades 
(chapter 2); 


b) leadership and oversight of the counter-terrorism effort (chapter 3) and assessment of 
the terrorism threatscape (chapter 4); 


c) the counter-terrorism efforts of the New Zealand Security Intelligence Service 
(chapter 5), New Zealand Police (chapter 6), the Government Communications 
Security Bureau (chapter 7) and the border agencies (chapter 8); 
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d) interagency activities - information sharing (chapter 9), target discovery (chapter 10), 
online capacity and capability (chapter 11) and the relationship between New Zealand 
Police and the New Zealand Security Intelligence Service (chapter 12); 


e) two statutes central to the counter-terrorism effort - the Terrorism Suppression Act 2002 
(chapter 13) and the Intelligence and Security Act 2017 (chapter 14); 


f) our evaluation of the counter-terrorism effort (chapter 15); 
g) our findings (chapter 16); and 
h) questions asked by the community (chapter 17). 


As we will explain, the intelligence and security agencies were at a low ebb in 2013-2014. 

A 2014 Performance Improvement Framework review of the New Zealand Intelligence 
Community was considered one of the worst reviews of its kind amongst New Zealand 
Public sector agencies. Recognition of significant capability and organisational weaknesses 
across the agencies resulted in the Strategic Capability and Resourcing Review. In 2016 
Cabinet agreed to add considerable additional funding ($178.7 million over four years) into 
the intelligence and security agencies (including a small amount of additional funds for the 
Department of the Prime Minister and Cabinet). This additional money started to become 
available in the 2016-2017 financial year. 


Our primary - although not exclusive - focus in the chapters that follow is on the period 
between 2014 and 2019, with particular emphasis on the last three years. The 2014 
Performance Improvement Framework review provides a useful snapshot of the state of 

the New Zealand Intelligence Community. And, beginning in the 2016-2017 financial year, 
the additional funding from the Strategic Capability and Resourcing Review was approved to 
enable the intelligence and security agencies to rebuild capacity and capability. 


There are three additional themes that emerged as the result of our inquiries: 


a) New Zealand had not been the subject of recent terrorist attacks. The apparently low 
threat of terrorism, controversies associated with the intelligence and security agencies 
and associated public suspicions as to their activities and utility, meant that the agencies 
had limited social licence, political support and funding. 


b) Leadership and coordination of the counter-terrorism effort was limited with the relevant 
Public sector agencies operating largely independently and in parallel. In the chapters 
that follow, we discuss the efforts that were made to address this and what these efforts 
did and did not achieve. 


c) There was a focus on Islamist extremist terrorism as the presenting threat and only very 
limited resources were dedicated to understanding other terrorist threats. We explain 
why this was so and make findings about it. 
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As we described in Part 4: The terrorist, the individual attempted to maintain operational 
security for a sustained period and was able to fund his activities with his own resources. 
He was a lone actor, who did not need to involve or rely upon others in order to carry out 
his plans. So, even if substantial additional resource had been dedicated to non-Islamist 
extremist threats, and to extreme right-wing threats, it is very unlikely that the individual’s 
activities, including his plans and preparation, would have been discovered by the relevant 
Public sector agencies. 
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Chapter 2: The setting 


2.1 Overview 


In this chapter we provide background to the counter-terrorism effort as it has evolved 
over the last two decades. 


In what follows, we: 


a) describe the changing threatscape since 2001 and the impact of these changes on 
New Zealand; 


b) discuss how the nature of terrorist attacks, and terrorists themselves, have changed 
and adapted over time; 


c) outline the controversies and other events that have affected Public sector agencies 
involved in the counter-terrorism effort; 


d) list the reviews of components of the national security system over the last twenty 
years; and 


e) describe the Strategic Capability and Resourcing Review, which resulted in significant 
investment to improve the capability and capacity of the New Zealand Intelligence 
Community over the last four years. 


2.2 The changing threatscape 


11 September 2001 and the global terrorist threat 


The Al Qaeda terrorist attacks against the United States of America on 11 September 2001 
transformed the perception of terrorism throughout the world. But terrorism is not a new 
phenomenon. While there is no universally agreed definition of terrorism,’ it has been part 
of history since ancient times. Some of the terrorism trends discussed in this and other 
chapters started well before 2001.” 


There is no easy way to track terrorism globally. What is defined and reported as terrorism 
can vary significantly across countries. In states where there is some form of armed civil 
conflict it can be difficult to distinguish between terrorism and insurgency (civil wars in Syria 
and South Sudan are recent examples).? Even so, there are several credible open-source 
databases that measure terrorism globally.* Their data reveals a gradual increase in the 
frequency of terrorist attacks from 1970-1992, then decline until 2004. From 2014 there has 
been a dramatic rise in the number of terrorist attacks worldwide. The regions most affected 
by this sharp increase are South Asia, the Middle East, and North Africa. They collectively 
account for around 70 percent of terrorist attacks in the past ten years. 





One researcher found at least 212 definitions of terrorism in use throughout the world. See Jeffery D Simon The Terrorist Trap 
(Indiana University Press, Bloomington, 1994) at page 29. 


nv 


Khusrav Gaibulloev, Todd Sandler and Charlinda Sanifort “Assessing the Evolving Threat of Terrorism” (May 2012) 3(2) Global 
Policy at page 16. 


wo 


Anthony H Cordesman Global Trends in Terrorism 1970-2076 (Center for Strategic and International Studies, 2017) at pages 4-6. 


a 


The most comprehensive of which is the University of Maryland’s Global Terrorism Database. 
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Terrorism in Western countries is much less common. In comparatively recent times 

it has included left-wing terrorism (for example, the Red Brigades in Italy in the 1970s), 
nationalist or separatist terrorism (for example, Northern Ireland in the 1970s and 1980s) 
and extreme right-wing terrorism (for example, the Oklahoma City bombing in 1995). 

And before 11 September 2001 there were examples of Islamist extremist terrorism against 
Western targets, such as the 1993 bombing of the World Trade Center. 


The attacks on 11 September 2001 were a “watershed” terrorist event. The response to 
the terrorist attacks of that day significantly affected the global security environment.® 
Considerable international attention and effort was focused on Islamist extremism and 
states that were thought to finance and harbour terrorists. Shortly after the attacks, 
the United States of America commenced its twenty year “War on Terror”, fought 
predominantly in Afghanistan and Iraq. 


After 11 September 2001, countries around the world reallocated significant resources to 
counter-terrorism, both international and domestic. Terrorism became a conspicuous 
feature of the international security environment. The United Nations, which had previously 
engaged with terrorism only tentatively, acted swiftly. The United Nations Security Council 
adopted Resolution 1373, which imposed a number of binding obligations on states, including 
tighter border controls and called for enhanced international cooperation against terrorism. 
This Resolution underpins the global legal framework for the prevention and suppression of 
terrorism.® 


The events of 11 September 2001 were followed by other terrorist attacks, some of which 
were not undertaken by Islamist extremists. The list below is not exhaustive, and focuses 

on terrorist attacks that would have been of particular interest to intelligence and security 
agencies in the West. We recognise that terrorist attacks have been far more numerous in 
Africa, the Middle East and South Asia. Relevant for our purposes, the terrorist attacks listed 
below were formative in shaping the security arrangements of Five Eyes countries, including 
New Zealand. 





5 Khusrav Gaibulloev and Todd Sandler “What We Have Learned about Terrorism since 9/11” (June 2019) 57(2) 
Journal of Economic Literature. 


® walter Gehr “The Counter-Terrorism Committee and Security Council Resolution 1373” (December 2004) 4(1 and 2) 
United Nations Office on Drugs and Crime: Forum on Crime and Society. 
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Table 9: Terrorist attacks since 11 September 2001 that shaped Five Eyes countries’ security 


arrangements 
Date 


12 October 2002 


Event 


Bombings in Bali, Indonesia 


Fatalities’ 


202 people killed, including 
2 New Zealanders 





11 March 2004 


Bombings in Madrid, Spain 


193 people killed 





7 July 2005 


Bombings on the London 
underground and bus transport 
network in London, United Kingdom 


52 people killed, including 
1 New Zealander 





11 July 2006 


Bombings of trains in Mumbai, India 


209 people killed 





27 July 2008 


Bombing in Istanbul, Turkey 


17 people killed 





5 November 2009 


Mass shooting at Fort Hood, Texas, 
United States of America 


13 people killed 





22 July 2011 


Bombing in Oslo and mass shooting 
on Uteya Island, Norway 


77 people killed 





11 March 2012 


Mass shooting in Montauban and 
Toulouse, France 


7 people killed 





5 August 2012 


Mass shooting at the Sikh Temple 
in Oak Creek, Wisconsin, United 
States of America 


6 people killed 





15 April 2013 


Bombings at the Boston marathon, 
Massachusetts, United States of 
America 


3 people killed 





24 May 2014 


Mass shooting at the Jewish 
Museum in Brussels, Belgium 


4 people killed 





15 December 2014 


Hostage taking and shooting at the 
Lindt Café in Sydney, Australia 


2 people killed 





7-9 January 2015 


Mass shootings in ile-de-France, 
Paris (including at the Charlie 
Hebdo office), France 


17 people killed 





14-15 February 2015 


Mass shooting in Copenhagen, 
Denmark 


3 people killed 








7 Fatalities do not include perpetrators. 
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Date 


26 June 2015 


Event 


Mass shooting at a tourist resort in 
Sousse, Tunisia 


Fatalities 


38 people killed 





17 July 2015 


Mass shooting at the Emanuel 
African Methodist Episcopal Church 
in Charleston, South Carolina, 
United States of America 


9 people killed 





13-14 November 2015 


Bombings and mass shooting in 
Paris, France 


130 people killed 





2 December 2015 


Mass shooting in San Bernadino, 
California, United States of America 


14 people killed 





22 March 2016 


Bombing at Brussels airport and 
subway, Belgium 


32 people killed 





16 June 2016 


Knife attack in Birstall, United 
Kingdom 


1 person killed, Jo Cox 
- British Member of 
Parliament 





14 July 2016 


Vehicle attack in Nice, France 


86 people killed 





19 December 2016 


Vehicle attack at Berlin Christmas 
market, Germany 


12 people killed 





29 January 2017 


Mass shooting at Quebec City 
Mosque, Canada 


6 people killed 





5 March 2017 


Vehicle attack at Westminster 
Bridge, London, United Kingdom 


5 people killed 








7 April 2017 Vehicle attack in Stockholm, 4 people killed 
Sweden 
3 June 2017 Vehicle and knife attacks at London __7 people killed 


Bridge and Borough Markets, 
London, United Kingdom 





19 June 2017 


Vehicle attack at Finsbury Park 
Mosque, United Kingdom 


1 person killed 





17 August 2017 


Vehicle and knife attacks in 
Barcelona and Cambrils, Spain 


16 people killed 
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Date Event Fatalities 


22 May 2017 Bombing at the Manchester Arena, 22 people killed 
United Kingdom 





23 April 2018 Vehicle attack in Toronto, Canada 10 people killed 





27 October 2018 Mass shooting at the Pittsburgh 11 people killed 
Tree of Life Synagogue, 
Pennsylvania, United States of 
America 





9 November 2018 Knife attack in Melbourne, Australia 1 person killed 





Some of the terrorist attacks referred to above were mass shootings. In many countries 
- the United States of America in particular - there have been mass shootings that could 
conceivably have had political motivations but were not considered terrorist attacks as 
the motivation was not clear. Mass shootings without political motivations can include, 
for example, school shootings or familicide (the perpetrator killing their family). 


In the last two decades, many planned terrorist attacks were disrupted by intelligence and 
security or law enforcement agencies. For example, between 2014 and 2019, there were 

16 major terrorist plots reported as prevented in Australia. And in the two years after 

the March 2017 Westminster Bridge attack in London, authorities in the United Kingdom 
disrupted 22 terrorist plots. Not all attacks prevented by authorities are reported, so there 
are likely to be many more that the public are not aware of. 
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Table 10: Recent instances of disrupted terrorist attacks 


Date 


August 2006 


Event 


United Kingdom police uncovered a terrorist plot to detonate liquid 
explosives disguised as canned drinks carried on board planes 
travelling from the United Kingdom to the United States of America 
and Canada. 





September 2009 


Eight people affiliated with Al Qaeda were arrested for a plot to bomb 
the New York City subway system and other targets. 





March 2012 


Indonesian police shot dead five people who were plotting to attack 
and bomb targets in Bali. 





August 2016 


Australian police arrested a right-wing extremist who had plotted 
terrorist attacks on Victorian Trades Halls and other “leftist” centres 
in Melbourne. 





New Zealand has not been immune from terrorism or mass shootings in its recent history. 
In 1985, Greenpeace’s ship the Rainbow Warrior was bombed in a state-led terrorist attack 
while it was moored in Auckland harbour. 


Table 11: Recent mass shootings in New Zealand 











Date Event Fatalities 
13-14 November 1990 _ Mass shooting in Aramoana, Otago 14 people killed 
20 May 1992 Mass shooting in Paerata, Franklin District 7 people killed 
20 June 1994 Mass shooting in Dunedin, Otago 5 people killed 
8 February 1997 Mass shooting in Raurimu, King Country 6 people killed 
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Impact of the changing threatscape on New Zealand 


The events set out in the tables above had effects on New Zealand. New Zealand 
recognised that there was a new security environment, to which it needed to respond. 

It did so in several ways. It contributed to international military operations (in Afghanistan, 
for example). It strengthened its intelligence and security links with international 

partner countries. It supported and implemented various United Nations resolutions and 
conventions related to counter-terrorism. 


New Zealand expanded its counter-terrorism effort between 2001 and 2004. Public sector 
agencies received a total of almost $30 million for initiatives such as extra security at 
airports and increased intelligence capability for both the New Zealand Security Intelligence 
Service and New Zealand Police.® The Terrorism Suppression Act 2002 was enacted 

quickly. It created specific new terrorist offences and created a terrorist entity designation 
regime to implement New Zealand’s international obligations. In 2005, the National 
Counter-Terrorism Plan was finalised. For many years, that was New Zealand’s principal 
statement about counter-terrorism, but it was never made available to the public.® 

It set out, among other things, the counter-terrorism risk management framework, the 
counter-terrorism coordination system, and the role of intelligence, threat assessment, 
strategic assessment and legislation in the counter-terrorism effort. Around the same 

time a strategic aim for New Zealand’s counter-terrorism effort first appeared in policy 
documents - that New Zealand is “neither the victim nor the source of an act of terrorism”."° 


2.3 The changing nature of terrorist attacks 


The international terrorist attacks perpetrated in the 1990s and early 2000s were primarily 
carried out by groups in terrorist cells. They were often sophisticated, carefully planned well 
in advance, involved multiple perpetrators and targets and used advanced attack methods, 
such as explosives. Groups such as Al Qaeda were concerned with “ever-bigger and more 
dramatic attacks”” and were discerning about whom they recruited and what targets they 
chose to attack.” 





8 Office of the Controller and Auditor-General Managing Threats to Domestic Security (October 2003) at page 7. 

% Simon Murdoch Counter-Terrorism: A review of the New Zealand CT landscape (Department of the Prime Minister and Cabinet, 
May 2073). 

‘© Simon Murdoch, footnote 9 above at pages 4-6. 


" Steven Metz “Can the U.S. Counter Terrorism’s Shift to Decentralised and Radicalized Violence?” (29 July 2016) 
World Politics Review. 


® Colin P Clarke and Steven Metz ISIS vs Al Qaida: Battle of the Terrorist Brands (RAND Corporation, Santa Monica, California, 
August 2016). 
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In the years following 11 September 2001, terrorist methods evolved. For example, suicide 
terrorist attacks became more prevalent. Such attacks can have a much higher death and 
injury toll than conventional bombing attacks. They coincided with what some experts saw 
as a move to more indiscriminate terrorist violence against civilian targets. Some experts 
have drawn a distinction - although it is an oversimplification - between “old terrorism” 
and “new terrorism”.’* Before 1990, most terrorist groups were left-wing or nationalist or 
separatist. This “old terrorism” was seen to be more discriminate, with terrorist groups at 
least sometimes carefully selecting targets that represented the authority they opposed 

- for example, military or government buildings. The strategy was to limit civilian deaths 
and injuries, as this would diminish support for their cause. By contrast, Al Qaeda wanted 
maximum publicity through carnage from the 11 September 2001 attacks. Some argue that 
such widespread targeting of civilians is a feature of “new terrorism”."° 


Following the loss of key leaders and safe havens, Al Qaeda’s power and influence fell 
considerably from its peak in the aftermath of 11 September 2001. Da’ish emerged from 
the remains of Al Qaeda’s affiliate in Iraq in 2003-2004. While it faded into obscurity for 

a period, it re-emerged in 2011 and took advantage of wars in Iraq and Syria to carry out 
attacks and recruit more followers. Da’ish achieved global recognition around 2014. At its 
height, Da’ish held about a third of the territory in Syria and 40 percent in Iraq.” 


As intelligence and security agencies and law enforcement became better at detecting and 
disrupting large-scale terrorist plots, terrorists turned to smaller-scale, less sophisticated 
attacks.” Islamist extremist terrorist groups decentralised and became less discerning 
about whom to recruit. Groups such as Da’ish have favoured an approach of “killing as many 
helpless victims as [they] can in low tech ways”,’® primarily by encouraging lone actors to 
commit terrorist attacks in their own countries. Such terrorist attacks killed civilians who 
were enjoying leisure time, perhaps at a concert, a Christmas market or a café. The aim was 
to instil widespread public fear. 





3 Khusrav Gaibulloev and Todd Sandler, footnote 5 above at page 279. 


“4 Max Abrahms, Matthew Ward and Ryan Kennedy “Explaining Civilian Attacks: Terrorist Networks, Principal-Agent Problems and 
Target Selection” (February 2018) 12(1) Perspectives on Terrorism at page 23. 

S Alexander Spencer “Questioning the Concept of ‘New Terrorism’” (January 2006) Peace, Conflict & Development at page 7. 

Max Abrahms, Matthew Ward and Ryan Kennedy, footnote 14 above at page 23. 

Wilson Center Timeline: the Rise, Spread, and Fall of the Islamic State (28 October 2019). 


8 Clare Ellis, Raffaello Pantucci, Jeanine de Roy Van Zuijdewijn, Edwin Bakker, Benoit Gomis, Simon Palombi and Melanie Smith 
Lone Actor Terrorism: Final Report (Royal United Services Institute for Defence and Security Studies: Countering Lone-Actor 
Terrorism Series, London, April 2016) at page 1. 


"9 Steven Metz, footnote 11 above. 
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As the list of attacks above demonstrates, Islamist extremist terrorism was not the only 
terrorist threat in the last two decades. Right-wing extremist terrorism was exemplified by 
the Oslo terrorist’s attack in 2011. This threat materialised again with the Charleston church 
shootings of 2015 and the Quebec City Mosque shootings of 2017. All of these attacks were 
committed by lone actors. The latter two terrorist attacks also demonstrate a tendency of 
those right-wing extremist terrorists who are hostile to adherents of particular religions or 
minorities to target their places of worship. 


The methods used by the extreme right-wing have some similarities with those used by 
Islamist extremists. Some aspects of the rhetoric are also comparable, such as threats 
posed by “foreign” elements undermining a particular way of life and culture, the legitimacy 
of violence to combat the perceived threat and seeking support and mobilisation across 
national borders. But, for a long time, right-wing extremism was not seen (and in some 
countries is still not seen) to be a threat to national and international security in the way 
that Islamist extremism is. In part this is because people exhibiting right-wing extremism 
are often not ethnically, socially or culturally distinct from the majority of the population. 


The influence of technology 


The internet has become a key platform for terrorist radicalisation and recruitment. It has 
been described as providing a surrogate community where people’s beliefs are developed 
and reinforced and individuals can become radicalised without a need to establish direct 
face-to-face contact. The internet can also act as a training tool and is a place where many 
potential terrorists can obtain practical information.”° The internet offers a global audience 
for extremists who wish to spread their views. These trends accelerated as the use of mobile 
technology proliferated after 2010. 


Far right groups were some of the earliest to engage in politics online and to use the 

internet for political purposes (see Part 2, chapter 5). Recent events have underscored their 
increasingly pervasive use of the internet, including the upsurge of hateful content online 

in 2015 and 2016 associated with the 2016 United States of America presidential election, 

the Brexit referendum, a series of Islamist extremist terrorist attacks and the arrival of large 
numbers of refugees to Europe from Africa, the Middle East and Central Asia (fleeing war, 
famine, economic depression and political oppression in their home countries). The far right 
has exploited the fear and anger generated by Islamist extremist terrorist attacks and the 
refugee crisis to recruit new followers, usually via the internet.” 





° Clare Ellis, Raffaello Pantucci, Jeanine de Roy Van Zuijdewijn, Edwin Bakker, Benoit Gomis, Simon Palombi and Melanie Smith, 
footnote 18 above at page 2. 


7" Maura Conway, Ryan Scrivens and Logan Macnair Right-Wing Extremists’ Persistent Online Presence: History and Contemporary 
Trends (International Centre for Counter-Terrorism - The Hague, October 2019) at page 2. 
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Islamist extremists have also been adept at exploiting digital technology. In the early 2000s 
Al Qaeda identified the “media war” as one of the strongest methods for promoting its 
organisation’s objectives and it allocated significant resources to this end. But an even more 
sophisticated use of digital media was pioneered by Da’ish.” In 2014, it launched “the most 
advanced, massive and probably the most efficient cyber jihad campaign ever”.*? Due in 
part to the effectiveness of its propaganda, Da’ish has been far more successful than other 
terrorist groups, such as Al Qaeda, in recruiting individuals within Western nations to its 
cause - either as foreign terrorist fighters or domestic terrorists. At the peak of its media 
activity in 2014, some fifty thousand pro-Da’ish accounts were estimated to be active 

on Twitter.”5 


Technology has made terrorists hard to detect 


Terrorist groups’ use of the internet provides opportunities and challenges for intelligence 
and security agencies. 


There are opportunities to access detailed information remotely about the lives, contacts 
and plans of potential terrorists. But technology is also creating challenges for intelligence 
and security and law enforcement agencies. Readily available communications platforms 

- such as Telegram, Signal and WhatsApp - employ end-to-end encryption to secure users’ 
messages. Apple iPhones are now encrypted by default and not even Apple can unlock a 
user’s encrypted phone. The availability of VPNs or Tor browsers, as well as the dark web, 
allows individuals to access and/or download online content without leaving easily traceable 
digital footprints.”© In these ways, technology is also making it harder to detect potential 
terrorists. 


The rise of lone actor terrorist attacks 


Lone actor terrorism has been defined as: 


The threat or use of violence by a single perpetrator ... not acting out of purely 
personal-material reasons, with the aim of influencing a wider audience, and who acts 
without any direct support in the planning, preparation and execution of the attack, and 
whose decision to act is not directed by any group or other individuals (although possibly 
inspired by others).”’ 





» lan Berman “Technology is making Terrorists more Effective - And Harder to Thwart” The National Interest (United States of 
America, 22 February 2019) https://nationalinterest.org/feature/technology-making-terrorists-more-effective—and-harder- 
thwart-45452. 


3 Miron Lakomy “Cracks in the Online ‘Caliphate’: How the Islamic State is Losing Ground in the Battle for Cyberspace” (June 2017) 
11 Perspectives on Terrorism at page 40. 


*4 Heather J Williams, Nathan Chandler and Eric Robinson Trends in the Draw of Americans to Foreign Terrorist Organisations from 
9/11 to Today (RAND Corporation, Santa Monica, California, 2018). 


*5 Heather J Williams, Nathan Chandler and Eric Robinson, footnote 24 above at page 20. 
6 Ilan Berman, footnote 22 above. 


77 Clare Ellis, Raffaello Pantucci, Jeanine de Roy Van Zuijdewijn, Edwin Bakker, Benoit Gomis, Simon Palombi and Melanie Smith, 
footnote 18 above at page 3. 
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Lone actor terrorists tend to attack targets perceived as easy, such as unprotected public 
spaces (shopping malls, parks, roads, bridges) and often use readily obtainable weapons, 
such as knives or vehicles. These attacks generally require limited planning and preparation 
and may result from very rapid radicalisation and mobilisation to violence. And because 
the perpetrators are lone actors they do not need to communicate with anyone else about 
their plans and preparation. This makes them less detectable, and thus less vulnerable to 
counter-terrorism measures than group-based terrorists. 


Da’ish actively encouraged lone actor attacks. In October 2014, the group’s magazine 
Dabig advised: 


The smaller the numbers of those involved and the less the discussion beforehand, 

the more likely it will be carried out without problems .... One should not complicate the 
attacks by involving other parties, purchasing complex materials, or communicating with 
weak-hearted individuals.” 


Lone actor terrorist attacks have not always resulted in fatalities, but have nonetheless 
instilled widespread public fear. The potential for an attack resulting in large numbers of 
people being injured or killed (illustrated by the terrorist attack on 15 March 2019, the Oslo 
terrorist’s attack and Da’ish-inspired high casualty attacks in Europe) means a lone actor 
attack is a significant concern for intelligence and security agencies.” 


A 2015 report from the Southern Poverty Law Center found that, between 2009 and 2015, 
74 percent of domestic terrorist attacks in the United States of America - from right-wing and 
Islamist extremists - were carried out and planned by a single person operating alone.*° 


An enemy within? 


Islamist extremism was and continues to be viewed as having a religious, cultural 

and ideological context and geographic locus distinct to, and removed from, the West. 
In this way, even Islamist extremists living in Western countries have been perceived by 
intelligence and security agencies as “foreign”. 





28 “The Failed Crusade” (October 2014) No. 4 Dabiq at page 44 in Clare Ellis, Raffaello Pantucci, Jeanine de Roy Van Zuijdewijn, 
Edwin Bakker, Benoit Gomis, Simon Palombi and Melanie Smith, footnote 18 above. 


72 Clare Ellis, Raffaello Pantucci, Jeanine de Roy Van Zuijdewijn, Edwin Bakker, Benoit Gomis, Simon Palombi and Melanie Smith, 
footnote 18 above at page 8. 


3° In the study, the Southern Poverty Law Center observed “there is no hard and fast agreement on what constitutes a terrorist 
action”. The survey relied upon records maintained by Indiana State University and the University of Maryland’s Global Terrorism 
Database, as well as the Southern Poverty Law Center’s own roster of apparent domestic terror incidents. It included incidents 
that likely involved mental illness, but that seemed to have an obvious political aspect. It covered terrorism inspired by 
anti-government, Islamist extremist and various forms of race or group hatred. And it encompassed both actual terror attacks 
and those that were disrupted. 
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People who have far right views are not usually ethnically, socially or culturally distinct 
from the majority of the population. As well there are considerable overlaps between the 
views of the majority of the population and far right views, and radical right and extreme 
right-wing views. This means that it can be difficult for intelligence and security agencies 
to identify unique and reliable indicators of people, groups and networks with extreme 
right-wing ideology. 


There have been examples in recent years of people with far right views being found 
embedded within the national security system in Western countries. For example, recent 
investigations in Germany indicate that the far right group Northern Cross had close links to 
the police and military. Some members were reportedly planning terrorist attacks against 
their political enemies. Using police computers, they collected some 25,000 names and 
addresses of pro-refugee local politicians. The members associated with the plan included 
two police officers, two army reservists and a police sniper." In the United States of America, 
a recent report from a former special agent of the Federal Bureau of Investigation concluded 
that white supremacist groups had infiltrated law enforcement agencies in every region of 
the country.” In the United Kingdom in 2017, four serving members of the British Army were 
arrested on suspicion of being members of the banned extreme right-wing group National 
Action. One of them was subsequently sentenced to eight years in prison.*? And a former 
Canadian Armed Forces combat engineer was linked to a violent white supremacist group 
and arrested in the United States of America by the Federal Bureau of Investigation after 
going missing for five months.** 


There is some evidence of the presence of far right individuals in New Zealand’s military. 

In December 2019 a soldier was arrested at Linton Military Camp in Palmerston North, amid 
suspicion they were part of a far right group. And in March 2020, the Australian activist 
group White Rose Society claimed that a (former) New Zealand Army soldier had posted on 
private online message boards about forming terrorist cells in New Zealand and purchasing 
firearms from the black market.*° 
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Katrin Bennehold “Body Bags and Enemy Lists: How Far Right Police Officers and Ex-Soldiers planned for ‘Day X’”” The New York 
Times (New York, 1 August 2020) https://www.nytimes.com/2020/08/01/world/europe/germany-nazi-infiltration.html https:// 
www.nytimes.com/2020/08/01/world/europe/germany-nazi-infiltration.html. 


3 


=? Sam Levin “White supremacists and militias have infiltrated police across US, report says” The Guardian (Los Angeles, 27 August 
2020) https://www.theguardian.com/us-news/2020/aug/27/white-supremacists-militias-infiltrate-us-police-report. 
3. 


a 


Lizzie Darden “British Army Lance Corporal was recruiting soldiers for neo-Nazi terrorist group” The Independent (United 
Kingdom, 13 November 2078) https://www.independent.co.uk/news/uk/crime/british-army-officer-national-action-mikko- 
vehvilainen-neo-nazi-terrorist-group-recruitment-a8632331.html. 

34 Karen Pauls and Angela Johnston “FBI arrests reveal shocking details in case against former Canadian reservist Patrik 
Mathews” CBC NEWS (Canada, 18 January 2020) https://www.cbc.ca/news/canada/manitoba/fbi-arrests-the-base-georgia- 
wisconsin-1.5432006. 

3: 


a 


Charlotte Cook “Soldier’s arrest raises concerns far-right could infiltrate Defence Force” RNZ (New Zealand, 18 December 2019) 
https://www.rnz.co.nz/news/national/405784/soldier-s-arrest-raises-concerns-far-right-could-infiltrate-defence-force. 


36 Isaac Davison “NZ Defence Force says white supremacist is a former soldier” The New Zealand Herald (New Zealand, 13 March 2020) 
https://www.nzherald.co.nz/nz/nz-defence-force-says-white-supremacist-is-a-former-soldier/WAKCYC7K4ENTMF2N26RGVKW2AI/. 
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The changing threatscape has increased the domestic threat in New Zealand 


New Zealand has not been immune from these global terrorism and extremism 
developments. In 2015, the Department of the Prime Minister and Cabinet described a 
“worsening [terrorist] threatscape at home”. There were larger numbers of persons of 
interest to intelligence and security agencies. By 2017, there were usually between 30-40 
individuals of counter-terrorism concern in New Zealand, most of whom were assessed as 
supporters of Da’ish. 


There were also potential threats of extreme right-wing terrorism. In January 2019 

New Zealand Police executed a search warrant and discovered considerable evidence 
that a school student, assessed as likely holding extreme right-wing beliefs, was planning 
to undertake a school shooting in February 2019. 


While the Public sector in New Zealand was adjusting to the new and shifting threatscape 
and developing its counter-terrorism capabilities, it had to navigate numerous events and 
controversies to which we now turn. 


2.4 Controversies and other events affecting the agencies 


Operation Eight controversy 


On 15 October 2007, 17 people, including some Tuhoe activists, were arrested after an 
investigation (Operation Eight) by New Zealand Police discovered evidence of secret 
military-style training camps in Te Urewera.3” An attempt was made to charge them under 
the Terrorism Suppression Act, but the then Solicitor-General found that the evidentiary 
threshold required under that Act had not been met and declined to give permission to 

lay terrorism charges. In 2013, the Independent Police Conduct Authority found that 

New Zealand Police had “unnecessarily frightened and intimidated” people during the raids, 
which included the coordinated execution of 41 search warrants throughout the country 
along with road blocks in the Tuhoe area. In 2014, the then Commissioner of New Zealand 
Police, Mike Bush, apologised for mistakes made during the raids. 


The entire episode attracted widespread media attention in New Zealand, much of which was 
critical of New Zealand Police. The merits of New Zealand Police activity are not our concern. 
What is important is that it diminished public confidence in New Zealand Police. 





37 Te Urewera is an area of mountains, forests, lakes and river valleys in the North Island of New Zealand. Te Urewera is “the 
homeland and heartland of the Tuhoe people”. See Te Urewera Board land management plan Te Kawa o Te Urewera (2017) 
at page 43. 
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Dotcom controversy 


In 2012, the United States of America requested the extradition of Kim Dotcom, the 
developer of Megaupload.com, to face charges relating to conspiracy to infringe copyright. 
Kim Dotcom held a New Zealand resident visa and was living in Auckland with his wife 

and young family. A dramatic raid was conducted on his home by New Zealand Police. It 
turned out that the Government Communications Security Bureau, acting on a request from 
New Zealand Police, had intercepted Kim Dotcom’s communications. This interception 
was unlawful, because at the time, the Government Communications Security Bureau 

was prohibited from intercepting the private communications of New Zealand permanent 
residents, a status held by Kim Dotcom. 


Then Prime Minister Rt Hon John Key apologised for the error, and the incident prompted a 
review of compliance at the Government Communications Security Bureau.** That review, 
undertaken by Rebecca Kitteridge, was published in early 2013. It identified systemic 
problems with the Government Communications Security Bureau’s legal compliance systems, 
and suggested that at least 88 people might have been subject to unlawful surveillance over 
the previous decade.*? 


Again, there was substantial media scrutiny of what had occurred, much of it very critical of 
the Government Communications Security Bureau and New Zealand Police. 


Snowden revelations 


In 2013, The Guardian newspaper in the United Kingdom began to publish a series of articles 
containing leaked classified information about the United States of America’s surveillance 
programme, which came from Edward Snowden (a former contractor for the National 
Security Agency). 


In New Zealand, the leaks were the basis for media reporting that the Government 
Communications Security Bureau conducted “full take” collection on Pacific Island states 
and trading partners. The leaks also led to reporting that New Zealand spied on countries 
for economic advantage and that the Government Communications Security Bureau 

used its capabilities to help the New Zealand Minister of Trade’s unsuccessful bid to 
become the Director-General of the World Trade Organization. While two subsequent 
Inspector-General of Intelligence and Security reports found that the Government 
Communications Security Bureau had acted appropriately (and made specific findings 

on the “full-take” allegations), the activities nonetheless led to questions from 

many New Zealanders about the appropriateness of the activities of the Government 
Communications Security Bureau and further undermined public confidence.*° 





38 Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM Intelligence and Security in a Free Society: Report of the First 
Independent Review of Intelligence and Security in New Zealand (Cullen-Reddy Report) (29 February 2016) at page 14. 


3° Rebecca Kitteridge Review of Compliance at the Government Communications Security Bureau (March 2013). 
4° Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM, footnote 38 above at page 24. 
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Accusations against the New Zealand Security Intelligence Service by the Leader of 
the Opposition 


In July 2011, the Southland Times newspaper published allegations that there had been 
Israeli intelligence activity in Christchurch at the time of the 22 February 2011 Canterbury 
earthquake. Then Leader of the Opposition, Hon Phil Goff, stated publicly that he had not 
been briefed on the issue. The New Zealand Security Intelligence Service advised the 
then Prime Minister, Rt Hon John Key, that the Leader of the Opposition had been briefed, 
and the Prime Minister said so publicly on 24 July 2011. Asa result of the conflicting 
statements, journalist and blogger Cameron Slater requested information from the 

New Zealand Security Intelligence Service. It responded by giving him three redacted 
documents. These documents formed the basis of a public challenge to the credibility 

of Hon Phil Goff. In November 2014, the Inspector-General of Intelligence and Security 
found that the New Zealand Security Intelligence Service had supplied Cameron Slater 
with incomplete, inaccurate and misleading information.” 


The consequence was a decrease in public and ministerial confidence in the intelligence 
and security agencies. Rightly or wrongly, this episode created a perception that the 
New Zealand Security Intelligence Service had become politicised. 


‘Jihadi brides” 


In December 2015, Rebecca Kitteridge, Director-General of Security, told a public session 

of Parliament’s Intelligence and Security Committee that there was a developing trend of 
New Zealand women travelling to Da’ish-controlled areas in the Middle East. She prefaced 
this statement with comments about the “threat to domestic security posed by foreign 
fighters and other extremists”. Then Prime Minister Rt Hon John Key, who chaired the 
Committee, asked if the women could be “jihadi brides”. He repeated the phrase in a media 
conference after the Committee hearing. 


What Rebecca Kitteridge had said to the Committee was literally correct in that a few women 
with New Zealand citizenship had travelled to Da’ish-controlled areas. However, the women 
in question had been living in Australia and had departed for the Middle East from there. 

The misconception that the women had been living in, and had departed from, New Zealand 
was not addressed for some time. This is because the New Zealand Security Intelligence 
Service needed the approval of international partner agencies before it could publicly state 
that the women had departed from Australia. 





4" Office of the Inspector-General of Intelligence and Security Report into the release of information by the NZSIS in July and August 
2011 (November 2014). 
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The “jihadi brides” remarks were picked up by the media and generated considerable 
controversy and ill-will towards members of New Zealand’s Muslim communities. Muslim 
communities reported that at that time they faced an increase in hostility, particularly 
Muslim women who were subjected to increased abuse and threatening behaviour. This 
was exacerbated by the delay in correcting the misconception. 


2.5 Institutional reviews 


Components of the New Zealand national security system and the Public sector agencies 
comprising it have been the subject of many reviews over the past two decades. By our 
count there have been at least 35. Not all of the reviews listed are publicly available. 


Table 12: Reviews of components of the New Zealand national security system 
(2003-2019) 


Date Review 


2003 Office of the Controller and Auditor-General Managing Threats to 
Domestic Security (October 2003) 





2009 Michael Wintringham and Jane Jones A National Security & Intelligence 
Framework for New Zealand (September 2009) 





2009 Simon Murdoch Report to the State Services Commissioner: Intelligence 
Agencies Review (October 2009) 





2011 New Zealand Police National Security Capability Assessment (March 2011) 





2011 Department of the Prime Minister and Cabinet New Zealand’s National 
Security System (May 2011) 





2012 Simon Murdoch Review of CTAG (April 2012) 





2013 Rebecca Kitteridge Review of Compliance at the Government 
Communications Security Bureau (March 2013) 





2013 Simon Murdoch Counter-Terrorism: A review of the New Zealand CT 
landscape (Department of the Prime Minister and Cabinet, May 2013) 





2013 Performance Improvement Framework - Review of the Department of the 
Prime Minister and Cabinet (DPMC) (June 2013) 





2013 Jacki Couchman Review of Arrangements for Coordinating National 
Security and Intelligence Priorities (Department of the Prime Minister 
and Cabinet, July 2013) 
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Date 


2014 


Review 


Government Communications Security Bureau Government 
Communications Security Bureau Functional Review (March 2014) 





2014 


Performance Improvement Framework - Review of the agencies in the 
core New Zealand Intelligence Community (NZIC) (March 2014) 





2014 


Office of the Inspector-General of Intelligence and Security Report 
into the release of information by the NZSIS in July and August 2011 
(November 2014) 





2015 


Steve Long Independent Review of Current Activity and Development of a 
Counter-Terrorism Strategy (2015) 





2015 


Performance Improvement Framework - Follow-up Review of the 
Department of the Prime Minister and Cabinet (DPMC) (February 2015) 





2015 


New Zealand Police National Security and Counter-terrorism Capability 
Review (September 2015) 





2015 


New Zealand Security Intelligence Service Strategic Capability and 
Resourcing Review (2015) 





2015 


New Zealand Security Intelligence Service Review of the New Zealand 
Intelligence Community’s Security Intelligence Operating Model (Project 
Aguero) (2015) 





2015 


New Zealand Law Commission The Crown in Court: A Review of the 
Crown Proceedings Act and National Security Information in Proceedings 
Report 135 (December 2015) 





2016 


Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM Intelligence 
and Security in a Free Society: Report of the First Independent Review 
of Intelligence and Security in New Zealand (Cullen-Reddy Report) 
(February 2016) 





2016 


New Zealand Security Intelligence Service The NZSIS 10-Year Operational 
Strategy (Project Sterling) (June 2016) 





2016 


Office of the Controller and Auditor-General Governance of the National 
Security System (November 2016) 





2016 


Simon Murdoch Review of the Integrated Targeting and Operations 
Centre (July 2016) 
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Date 


2017 


Review 


Office of the Inspector-General of Intelligence and Security Report 
into the Government Communications Security Bureau’s process for 
determining its foreign intelligence activity (2017) 





2017 


Office of the Controller and Auditor-General Report on Border Security: 
Using information to process passengers (June 2017) 





2018 


New Zealand Intelligence Community NZIC Follow-up Self Review (2018) 





2018 


New Zealand Security Intelligence Service Performance Improvement 
Framework: Follow-up Self Review of the New Zealand Security 
Intelligence Service Te Pa Whakamarumaru (March 2018) 





2018 


Simon Murdoch CTAG 2078: Its placement in New Zealand’s 
counter-terrorism system architecture and its location; an independent 
view (July 2018) 





2018 


Office of the Inspector-General of Intelligence and Security Complaints 
arising from reports of the Government Communications Security Bureau 
intelligence activity in relation to the South Pacific, 2009-2015 

(July 2018) 





2018 


Performance Improvement Framework - Follow-up Review for the 
New Zealand Intelligence Community (NZIC) Te Ropu Parongo Tarehu 
o Aotearoa (August 2018) 





2018 


Office of the Inspector-General of Intelligence and Security A review of 
the New Zealand Security Classification System (August 2018) 





2018 


Office of the Inspector-General of Intelligence and Security 2016-17 
Review of NZSIS requests made without warrants to financial service 
providers: Report (November 2018) 





2018 


Office of the Inspector-General of Intelligence and Security Warrants 
Issued under the Intelligence and Security Act 2017: Report 
(December 2018) 





2019 


New Zealand Security Intelligence Service The 2079 Terrorist Attacks in 
Christchurch: A review into NZSIS processes and decision-making in the 
lead up to the 15 March attacks (Arotake Review) (June 2019) 





2019 


Office of the Inspector-General of Intelligence and Security Report ona 
review of the New Zealand Security Intelligence Service relationships at 
the border (6 September 2019) 
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Individually and collectively, these reviews provide snapshots of Public sector agencies’ 
performance. They also should have informed decision-making. While we have drawn 
on them as part of our inquiry, we have also seen that some of the deficiencies previously 
identified have yet to be fixed (see Part 8, chapter 3). 


2.6 The Strategic Capability and Resourcing Review programme 


In 2014, the New Zealand Intelligence Community received a very adverse Performance 
Improvement Framework review.*? Cabinet was subsequently advised that the New Zealand 
Intelligence Community was facing significant changes in the domestic and international 
operating environments and its ongoing funding was not sufficient. In response, the 

New Zealand Intelligence Community undertook the Strategic Capability and Resourcing 
Review. This addressed resourcing and resulted in the approval in 2016 of $178.7 million to 
be invested in the New Zealand Intelligence Community over four years. 


The implementation of the recommendations that followed the Strategic Capability and 

Resourcing Review and the progressive enhancement of the capability and capacity of the 
New Zealand Security Intelligence Service form an important part of our assessment of its 
contributions to the counter-terrorism effort before 15 March 2019 (see Part 8, chapter 5). 





# Performance Improvement Framework: Review of the agencies in the core New Zealand Intelligence Community (NZIC) 
(March 2014). 
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Chapter 3: Leadership and oversight 


3.1 Overview 


In New Zealand, many Public sector agencies contribute to the counter-terrorism effort. 
Each agency is responsible for its own performance and contribution. Leadership and 
oversight of the collective counter-terrorism effort is not exercised through a single agency 
or ministerial portfolio. 


In this chapter we: 

a) describe political ownership and public engagement in the counter-terrorism effort; 
b) assess leadership and coordination of the counter-terrorism effort; 

c) examine strategy and priority setting; 

d) describe oversight and performance monitoring; 

e) discuss gaps in the leadership and oversight of the counter-terrorism effort; and 


f) set out developments since 15 March 2019. 


3.2 Political ownership and public engagement 


Political ownership of, and public discussion on, terrorism risk provide transparency and 
enhance social licence for the counter-terrorism effort. 


In New Zealand, prime ministers and ministers actively engage on national security issues 
that are well recognised by the public, such as natural hazards, biosecurity and border 
security. They rarely speak publicly about the terrorism threat or violent extremism, and far 
less so than we observed or were told about in Australia, Norway and the United Kingdom. 
One senior official told us that ministers “pay attention to national security questions when 
they’re put in front of them and not otherwise”. 


In 2014, the government created a new role of minister for national security and intelligence, 
with responsibility for leading the national security system. This was separate to the existing 
role of minister responsible for the intelligence and security agencies.*? Then Prime Minister, 
Rt Hon John Key, made a significant national security speech on 5 November 2014.4 In this 
speech he disclosed, for the first time, the watch list of 30-40 individuals of national security 
concern and the terrorism threat level and publicly confirmed that New Zealand was a 
member of the Five Eyes. 





43 Rt Hon John Key National Security and Intelligence role created (6 October 2014) https://www.beehive.govt.nz/release/national- 
security-and-intelligence-role-created. 


44 Rt Hon John Key Speech to NZ Institute of International Affairs (6 November 2014) https://www.beehive.govt.nz/speech/speech- 
nz-institute-international-affairs-o. 
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In 2016, the then Attorney-General, Hon Christopher Finlayson, undertook public 
engagement on the Intelligence and Security Bill (see Part 8, chapter 14). This included 
community hall meetings and visits to masajid. 


As we will outline in Part 8, chapter 4, ministers and the public generally understood that 
there was a relatively benign terrorist threatscape in New Zealand. Before the 15 March 2019 
terrorist attack, the threat and risk of domestic terrorism (and especially of non-Islamist 
terrorism) were lightly covered in assessments and policy advice to ministers, such as when 
the National Security and Intelligence Priorities were approved. For example, the regular 
intelligence briefs provided by the National Assessments Bureau to the prime minister 
included little on the domestic extremism or terrorism environment. From 2010 to 

15 March 2019, these briefs contained fewer than twenty references to domestic extremism 
in New Zealand. 


Overall New Zealand’s relative geographic isolation and the comparative absence of terrorist 
attacks on New Zealand soil led to low levels of public and official concern about domestic 
terrorism threats. The overall threat of terrorism in New Zealand was assessed as “low” 
(terrorist attack is assessed as possible but is not expected) or “very low” (a terrorist attack 
is assessed as very unlikely) between 2010 and 2018. This perception of the terrorism risk 
impacted on the pace at which policy decisions were progressed. An example involves the 
delays in updating relevant legislation (see Part 8, chapter 13). 


Informed public debate can provide a sense of society’s appetite for activities to address 
threats to national security. From our inquiries, we are satisfied that agencies have had 
successes in countering and disrupting terrorism and violent extremism in New Zealand. 
But these domestic counter-terrorism successes occured well out of the public eye and 
their stories have not been told publicly. Instead, we heard that the Dotcom and Snowden 
controversies (see Part 8, chapter 2) diminished politicians’ interest in promoting public 
discussions or counter-terrorism initiatives that might include the intelligence and security 
agencies’ roles. 


Former and current ministers and senior officials appear to have been concerned that 
public-facing strategies and public discussion about countering terrorism might have 
had adverse impacts on communities (particularly Muslim communities), given rise to 
unwarranted community anxiety or created expectations of mitigations the government 
could not provide. In addition, New Zealand was still facing fiscal constraints in the 
aftermath of the Global Financial Crisis and the 2010-2011 Canterbury earthquake 
sequence. As a result of these factors, and the impact of public controversies, ministers 
have approached any changes to the counter-terrorism effort conservatively. 
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The absence of a widespread or regular national public dialogue on New Zealand’s national 
security and counter-terrorism effort was raised with us by senior officials, community 
groups, our Muslim Community Reference Group and in submissions. Several previous 
reviews highlighted the need for change in this area. The Department of the Prime Minister 
and Cabinet recommended introducing an ongoing public dialogue on national security and 
counter-terrorism in the 2017 Briefing to the Incoming Minister for National Security and 
Intelligence. But this did not happen. 


There was very little engagement between those responsible for the counter-terrorism 
effort and the public before 15 March 2019. This meant there was neither well-informed 
public discussion on the terrorism threat and risk, nor information on how to identify 
threats. Before 15 March 2019, there was limited reporting from the public to the 

New Zealand Security Intelligence Service, and such reporting as there was focused largely 
on suspected Islamist extremists. The same was true of the reporting of possible extremists 
to New Zealand Police. 


There was an understandable increase in engagement from the public immediately after 

15 March 2019. Public referrals or reports to the New Zealand Security Intelligence Service 
and to New Zealand Police increased significantly as the public had a greater appreciation 
of the terrorist threat. Many of these reports involved people on the far right. For example, 
in the period between 15 March 2019 and the end of May 2019, New Zealand Police received 
2,326 public reports or referrals, a substantial proportion of which related to people with far 
right views. 


Since 15 March 2019, the Government has released more information relating to national 
security and the counter-terrorism effort. But this has happened quietly, and without a 
framework to engage the public or encourage diverse views on countering terrorism and 
violent extremism. For example: 


a) The National Security and Intelligence Priorities (agreed in 2018) were published for the 
first time as an appendix to the Department of the Prime Minister and Cabinet’s 2019 
annual report.*® There was no accompanying public announcement. Unsurprisingly, 
this did not generate public discussion about intelligence collection priorities, despite 
the increased interest in the counter-terrorism effort after 15 March 2019. In September 
2020, the National Security and Intelligence Priorities were published directly on the 
Department of the Prime Minister and Cabinet’s website.*” 





45 Office of the Controller and Auditor-General Managing Threats to National Security (October 2003); Performance Improvement 
Framework, footnote 42 above; Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM, footnote 38 above. 


46 Department of the Prime Minister and Cabinet Annual Report 2018/2019 for the year ended 30 June 2019 (October 2019) 
https://dpmc.govt.nz/publications/annual-report-2019. 


47 Department of the Prime Minister and Cabinet website National Security and Intelligence Priorities 
https://dpmc.govt.nz/our-programmes/national-security-and-intelligence/national-security-and-intelligence-priorities. 
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b) A high-level Countering terrorism and violent extremism national strategy overview was 
published on the Department of the Prime Minister and Cabinet’s website in February 
2020.** Again, this was not promoted as an opportunity for, and thus did not generate, 
wide public discussion. 


3.3 Leadership and coordination 


In this section, we discuss leadership and coordination roles within New Zealand’s national 
security system and the counter-terrorism effort. As will become apparent, there is some 
lack of clarity about leadership of the different parts of the counter-terrorism effort and no 
one agency is currently responsible for monitoring overall system performance. 


A decentralised coordinated model 


New Zealand’s counter-terrorism effort is decentralised but coordinated. It is decentralised 
in that no single agency has overall responsibility for the effort. Instead, it is spread across 
multiple agencies, with each agency responsible for its own performance and contribution. 
Coordination comes from the Department of the Prime Minister and Cabinet. It does not 
have directive control over the individual agencies or their contribution to the overall work 
programme. 





48 Department of the Prime Minister and Cabinet Countering terrorism and violent extremism national strategy overview (undated) 
https://dpmc.govt.nz/sites/default/files/2020-02/2019-20%20CT%20Strategy-all-final. pdf. 
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Figure 40: Counter-terrorism functions of Public sector agencies involved in the 


counter-terrorism effort 
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This model reflects the decentralised approach to the national security system as a whole 
(see Part 2, chapter 4). The Department of the Prime Minister and Cabinet told us that 
centralised responsibility for the national security system is not necessarily a preferred 
outcome: 


Operating as a system, and exercising collective leadership over the national security 
choices that must be made, does not imply collective accountability for all outcomes. 
Particularly in a system of government such as that operating in New Zealand, it is not 
possible to centralise everything. Agencies must know where their accountabilities are, 
and own these. 


The government has identified some weaknesses with how decentralised models of 
accountability and governance work in the New Zealand Public sector. In August 2020, 

the Public Service Act 2020 was enacted to address some of these deficiencies. The Act 

has introduced mechanisms to facilitate collective responsibility and accountability for 
multi-agency programmes of work. We come back to this later in Part 10: Recommendations. 


The role of the Department of the Prime Minister and Cabinet 


The Department of the Prime Minister and Cabinet is the lead Public sector agency on 
national security. Its role is to coordinate activity across the relevant Public sector agencies 
involved in the national security system. Its chief executive is the “lead official for the whole 
National Security System” and chairs the Officials’ Committee for Domestic and External 
Security Coordination when New Zealand is faced with a national security event. It is also 
responsible for coordinating government action in response to national security events, 
ensuring national security risks are managed appropriately, leading policy development on 
national security matters, hosting the National Assessments Bureau and administering the 
Intelligence and Security Act 2017. 


The Department of the Prime Minister and Cabinet’s current organisational structure for its 
counter-terrorism functions is outlined in the graphic below. 
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Figure 41: Counter-terrorism functions within the organisational structure of the 
Department of the Prime Minister and Cabinet 


Chief Executive 
National Security Group 


MUM EMCEE National Security National Security National Intelligence 
Assessments Bureau Policy Systems and Risk Coordination 


Produces intelligence Provides policy advice Implements decisions Chairs National 
assessments on national security and of the Officials’ Intelligence Coordination 
intelligence issues Committee for Domestic Committee 
Administers the and External Security Coordinates 
Intelligence Coordination (ODESC) development of National 
and Security Act 2017 Supports the Security Security and Intelligence 
and Intelligence Board Priorities 





The Department of the Prime Minister and Cabinet has a limited legislative mandate for 
national assessments but otherwise has no directive authority or statutory mandate for 

its coordination of the national security system or counter-terrorism effort. The relevant 
agencies and chief executives each exercise their own statutory responsibilities and 
functions, which are not controlled by the Department of the Prime Minister and Cabinet. 
The Department of the Prime Minister and Cabinet’s direct relationship to the prime minister 
creates a convening power across all Public sector agencies. 


We were told that other agencies are uncomfortable if the Department of the Prime Minister 
and Cabinet is seen as too assertive on national security matters. Howard Broad, former 
Deputy Chief Executive of the Department of the Prime Minister and Cabinet, told us that 
when he explicitly raised the question of monitoring the intelligence and security agencies’ 
performance at the Security and Intelligence Board, “there was strong pushback by the 
agencies and [they] generally agreed around the table that wasn’t the Department of the 
Prime Minister and Cabinet’s role”. He said that, on a practical level, “no-one was indicating 
a desire that the Department of the Prime Minister and Cabinet increase its capability”. 


We also heard that successive prime ministers were not willing to seek additional funding 

for their own department (especially when they were calling for fiscal control by other 
ministers). Nor would they support a budget bid through another minister advocating for 
investment for the Department of the Prime Minister and Cabinet to coordinate national 
security responsibilities. The result is that the coordination role has not been well resourced. 
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The Department of the Prime Minister and Cabinet advised us that “[its own] investigations 
have not uncovered any policy or internal papers prepared by the Department of the 

Prime Minister and Cabinet which explicitly and exclusively deal with the question of its 
role in the national security system and work priorities directly associated with this”. 

In its 2018-2019 Business Plan, the National Security Group in the Department of the 

Prime Minister and Cabinet did note that: 


... a Strategic refresh is needed. [It is] time to refine the purpose, goals, roles and 
responsibilities [of the National Security Group]. 


This work had not been completed by 15 March 2019. 


The Security and Intelligence Board 


The Security and Intelligence Board is one of two governance boards that bring 

together the chief executives of agencies with national security responsibilities 

(see Part 2, chapter 4). The Security and Intelligence Board focuses on threats from human 
sources, such as terrorism or foreign interference. The other governance board, the Hazard 
Risk Board, focuses on threats from non-human sources, such as natural hazards, biosecurity 
threats and pandemics. 


Figure 42: Governance of the counter-terrorism effort 


Prime Minister 
and Cabinet 






Cabinet External Relations 
and Security Committee 







Counter-Terrorism Governance Response to a terrorist attack 


Chief Executive Officials’ Committee for 
Yoram mM gtd Bete ee eee ata] 
Minister and Cabinet Coordination (ODESC) 


YT gi avail | New Zealand Police 
Intelligence Board (lead agency for Response) 


Counter-Terrorism National Intelligence 
Coordination Committee Coordination Committee 
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27 The Security and Intelligence Board membership includes the chief executives of the 
Department of the Prime Minister and Cabinet (Chair), the Government Communications 
Security Bureau, the Ministry of Defence, the Ministry of Foreign Affairs and Trade, 

New Zealand Customs Service, the New Zealand Defence Force, New Zealand Police and the 
New Zealand Security Intelligence Service. Other chief executives may be invited by the Chair 
to attend meetings if required. The Security and Intelligence Board reports to the Cabinet 
External Relations and Security Committee. 


28 The role of the Security and Intelligence Board has evolved following various reviews. Its 2017 
Terms of Reference identified its vision as “a resilient New Zealand against those who would 
wish us harm” and its purpose as to: 


Lead, build and govern the security and intelligence system that: 
* Identifies and understands threats, patterns and risks in our environment; 


*  Prioritises vulnerabilities and threats and understands the desired end state to be 
obtained; 


* Hold[s] system to account for delivery: 


* Governance of the “[Security and Intelligence Board] deputies group” to implement 
[the Security and Intelligence Board’s] vision; 


* By tracking tasking - ensuring there is a plan that is achievable; 


* — Enabling of the system wide support of tasking; 


> 
wn 
wn 
© 
wn 
en 
a 
oa 
ct 
ia 
O 
OQ 
° 
= 
=] 
et 
2 
x 
ct 
© 
3 
2 
= 
3 
© 
=R 
° 
4 


* Reporting to [the National Security Committee / Officials’ Committee for Domestic 
and External Security Coordination] as required; 


* Build[s] system capabilities and capacity: 
* Identifying gaps and weaknesses; 


* Developing system policies and processes; 





* — Reviewing and learning; and 


* Remain[s] alert to current threats and opportunities; proactive testing of the plan 
against “real life information” and events and be agile and responsive. 


29 The Security and Intelligence Board’s deliverables include the National Security and 
Intelligence Priorities, an annual strategic assessment of the environment and action plans to 
identify threats, patterns and risks. 
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The chief executives on the Security and Intelligence Board each have statutory functions 
that are not controlled by the Security and Intelligence Board. They each report to their 
respective ministers and exercise their own responsibilities. 


Although its Terms of Reference include “hold[ing the] system to account for delivery”, the 
Security and Intelligence Board does not monitor the performance of the counter-terrorism 
effort and has not put in place a performance framework and standards for it. It has also 
not established a system for monitoring its own performance. A 20 June 2019 report to the 
Security and Intelligence Board noted that work had not yet commenced on measuring or 
assessing its own governance and coordination performance, the authorising environment 
(including social licence, transparency and legislation) or relationships (including Five Eyes 
and other international relationships). 


The Security and Intelligence Board has several subcommittees. The two subcommittees 
most relevant to the counter-terrorism effort are: 


a) the Counter-Terrorism Coordination Committee, which provides advice to the Security 
and Intelligence Board on counter-terrorism systems, priorities, risks, projects and 
resourcing requirements; and 


b) the National Intelligence Coordination Committee, which coordinates the delivery of the 
National Security and Intelligence Priorities and the work programmes of the assessment 
agencies (see Part 8, chapter 4). 


Leadership of the counter-terrorism effort 


It is important that all agencies in the counter-terrorism effort are guided by a clear 
understanding of who does what, when, why and how across the 4Rs - Reduction, Readiness, 
Response and Recovery activities (See Part 2, chapter 4). 


The government’s Counter-Terrorism Playbook* states that New Zealand Police are “the 
designated lead agency, providing command and control of the multi-agency response to 
any [terrorism] event in New Zealand”. The Department of the Prime Minister and Cabinet 
has publicly stated that “New Zealand Police are well prepared and exercised to lead the 
response to a terrorism incident”. So the lead agency for Response to a terrorist incident 
is clear. 


We did not, however, observe a similar consensus on which Public sector agency leads 
Reduction, Readiness and Recovery activity. 





49 Department of the Prime Minister and Cabinet Counter-Terrorism Playbook (2019) at page 40. 
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The Department of the Prime Minister and Cabinet told us that it, together with New Zealand 
Police and the New Zealand Security Intelligence Service, had been identified as the 

risk coordinating agencies for terrorism since the beginning of the development of the 
National Risk Register framework in 2015 (see 3.4 Setting the strategy). In contrast, the 
Security and Intelligence Board’s December 2018 report on Better Management of National 
Security Risks identified New Zealand Police and the New Zealand Security Intelligence 
Service as the risk coordinating agencies, but not the Department of the Prime Minister 

and Cabinet. 


The National Security Handbook refers to New Zealand Police as the lead agency for 
counter-terrorism at the national, regional and local levels, suggesting it is the lead agency 
for all of the 4Rs. The Department of the Prime Minister and Cabinet considers 

“[New Zealand] Police are the lead agency for all 4Rs’ of the Terrorism risk, but that several 
parts of risk management and the [Counter-Terrorism Work Programme] are led by other 
agencies coordinated by [the Counter-Terrorism Coordination Committee] and governed by 
the Security and Intelligence Board”. 


In 2016, the Security and Intelligence Board discussed the overarching leadership of 
counter-terrorism in New Zealand and considered identifying New Zealand Police as the lead. 
In the associated discussions there was recognition of the significant additional burden this 
would place on New Zealand Police and the absence of a lead minister for counter-terrorism. 
In the end, there was no decision on this and leadership remained with the Department of 
the Prime Minister and Cabinet. 


In October 2016, the role of Specialist Coordinator was created within the Department 

of the Prime Minister and Cabinet to provide system-level coordination of collective 
counter-terrorism activity through the Counter-Terrorism Coordination Committee, and 
support the Security and Intelligence Board and Cabinet National Security Committee 
governance functions. When it was created, the Specialist Coordinator role was expected 
to be responsible for “driving delivery of a co-ordinated, cross-agency programme that 
strives to eliminate gaps and minimises the likelihood and impact of terrorist threats to 
New Zealand”. It was expected that the creation of this role would ensure that “the 
[Counter-Terrorism Work Programme] can respond in a timely manner to changing risk”. 
As chair of the Counter-Terrorism Coordination Committee, the Specialist Coordinator 
would work with senior officials from agencies with key counter-terrorism responsibilities, 
including those involved in social cohesion and preventing violent extremism. After the 
role was filled, a high-level Counter-Terrorism Work Programme was developed and reported 
to the Security and Intelligence Board in July and September 2018. The Specialist 
Coordinator was the only coordinator appointed for a specific national security threat 
before 15 March 2019. 
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Evidence provided to us indicates there continues to be different understandings and 
expectations about where leadership of the counter-terrorism strategy and the 
counter-terrorism effort sits, and what that means in practice: 


a) 


b) 


C) 


d) 


€) 


f) 
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A former Specialist Coordinator at the Department of the Prime Minister and Cabinet 
(who chaired the Counter-Terrorism Coordination Committee) considered it more 
important that the Security and Intelligence Board had overall responsibility for 
collective counter-terrorism responsibilities rather than one agency. This is because 
backing from multiple agencies is needed to deliver the counter-terrorism effort. 


The Government Communications Security Bureau suggested that domestic 
counter-terrorism efforts are co-led by New Zealand Police and the New Zealand Security 
Intelligence Service, as the domestically-focused law enforcement and intelligence and 
security agencies. 


Rebecca Kitteridge, Director-General of Security, told us the overall lead for 
counter-terrorism is the Specialist Coordinator in the Department of the Prime Minister 
and Cabinet, as that agency can look “end to end” from social inclusion right through 
to prosecutions and has the coordination and policy function needed for this. She 
expressed concern that there had not been a proper analysis put forward when 

New Zealand Police were proposed as the lead. She also noted that while New Zealand 
Police have a wide reach into communities they are not a policy agency and, as an 
operational agency with a law enforcement mandate, they were not best placed to lead 
at the softer end of counter-terrorism activities, such as social inclusion and countering 
violent extremism. 


The New Zealand Security Intelligence Service advised that it does not consider itself the 
“lead agency for the national counter-terrorism effort”, but rather that it has the lead 
responsibility for “counter-terrorism security intelligence investigations, analysis and 
reporting”. 


A current senior manager at the New Zealand Security Intelligence Service thought 

the Department of the Prime Minister and Cabinet is best placed to lead the 

“practical ... day-to-day” counter-terrorism system because it can see across sectors 
and agencies and houses the Specialist Coordinator. They thought the Department of the 
Prime Minister and Cabinet does not currently play that role and no one agency does. 


Mike Bush, former Commissioner of Police, told us he did not see the Department of the 
Prime Minister and Cabinet as the counter-terrorism lead. He said the lead could be, and 
currently is, held jointly by New Zealand Police and the New Zealand Security Intelligence 
Service, but that clarity of their roles and responsibilities is essential. 


g) Andrew Kibblewhite, former Chief Executive of the Department of the Prime Minister and 
Cabinet, suggested many agencies had a part to play (for example, the Department of 
the Prime Minister and Cabinet for coordination, the New Zealand Security Intelligence 
Service via the Combined Threat Assessment Group for assessing risk and New Zealand 
Police for Response). 


Some of the opinions expressed above take a broad view of the definition of 
counter-terrorism, one that includes measures such as social inclusion (see Part 9: Social 
cohesion and embracing diversity). But even with that acknowledgement, the different 
views expressed above show that there is no common understanding about leadership of the 
counter-terrorism effort and what it means in practice. 


3.4 Setting the strategy 


Within the New Zealand public sector, multiple Public sector agencies often contribute toa 
single programme of work. In this situation it is common to create a strategy to clarify roles 
and responsibilities and coordinate, prioritise and align agencies’ work. 


In this section we discuss efforts to develop a counter-terrorism strategy, an approach to 
national risk management and priorities for collection and assessment of national security 
intelligence. 


Counter-terrorism strategy 


The need for a counter-terrorism strategy has been highlighted in a number of reviews. 

In 2013, Counter-Terrorism: A review of the New Zealand CT landscape noted that 

“New Zealand does not have an overarching policy document describing our national 
approach to counter-terrorism” and that “in the main, agencies are left to their own 
judgement with respect to the activities they embark upon with respect to reducing the 

risk of terrorism”.5° Also in 2013, the Review of Arrangements for Coordinating National 
Security and Intelligence Priorities recommended that a national strategy should be urgently 
completed to “provide a single set of organising principles for the national security system to 
prioritise and plan”.®’ While this point was made about the lack of a strategy for the national 
security system, it also applies to the lack of a counter-terrorism strategy. 


A 2015 report reiterated the need for a New Zealand counter-terrorism strategy. 

That report identified an insufficient emphasis on risk assessment, the absence of 
formalised arrangements that enabled ministers to weigh up the violent extremist or 
terrorist risk against other national security risks and the lack of whole-of-government 
counter-terrorism work programme management, reporting or evaluation. It also identified 
the continued absence of planned and regular public engagement on the terrorism risks 
facing New Zealanders at home and abroad and measures taken to counter those risks. 





5° Simon Murdoch, footnote 9 above at page 26. 


5" Jacki Couchman Review of Arrangements for Coordinating National Security and Intelligence Priorities (Department of the 
Prime Minister and Cabinet, July 2013). 
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Following this advice, Cabinet agreed in 2015 that the minister responsible for the 

New Zealand Security Intelligence Service and the Government Communications Security 
Bureau would lead public engagement on, and represent, the broader counter-terrorism 
work programme (which included the Department of Corrections, the Department of Internal 
Affairs, the Government Communications Security Bureau, Immigration New Zealand, 

the Ministry of Defence, the Ministry of Foreign Affairs and Trade, the Ministry of Justice, 
New Zealand Police, the New Zealand Security Intelligence Service and the Office of Ethnic 
Communities). Later that year, Cabinet directed officials to report to ministers with advice 
on the development and release of a public counter-terrorism strategy and public 
engagement plan. 


In July 2016, the Security and Intelligence Board recognised the “urgent need for 
agencies to [sort out] New Zealand’s counter-terrorism arrangements in line with 
ministerial expectations” and noted the continuing absence of an overarching strategy 
for counter-terrorism. 


A Counter-Terrorism Strategic Framework was approved by the Security and Intelligence 
Board in 2018. This was not a detailed, comprehensive strategy document. It was a two page 
document intended to “support directional alignment across agencies and to act as a tool for 
supporting articulation of our [counter-terrorism] system”. Its primary audience was not the 
public. It had not been developed in consultation with non-government parties. It did not 
assign leadership and responsibility to specific Public sector agencies for counter-terrorism 
prevention and Reduction activity. This was the only contemporary document guiding the 
counter-terrorism effort before 15 March 2019. 


Although the agencies continued to support the development of a national counter-terrorism 
strategy, a strategy had not been adopted before 15 March 2019. A senior official spoke 

of their frustration with how long it has taken to develop a counter-terrorism strategy. 

They were also frustrated at the low prioritisation of counter-terrorism compared to other 
important national security issues such as pandemics and people smuggling. 


As explained in Part 2, chapter 4, counter-terrorism activities have expanded to include 
Reduction activities to counter violent extremism. These activities range from early 
intervention programmes targeting those showing signs or vulnerabilities to radicalisation, 
through to community-based activities aiming to prevent the emergence of violent extremism 
by building social inclusion. 


Before 15 March 2019, there were some activities underway that aimed to reduce the 

risk of violent extremism, such as the Young Person’s Intervention Programme (see 

Part 8, chapter 6). We heard that Reduction had received little attention at the Security 
and Intelligence Board despite urging from some agencies and community groups (see 
Part 9: Social cohesion and embracing diversity for a description of efforts by community 
groups). There was progress in September 2018 when the Security and Intelligence 
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Board agreed to a High-Level Framework for the Prevention of Violent Extremism. This 
encompassed both the development of a multi-agency intervention programme providing 
tailored support to people at risk of violent extremism (building on the Young Person’s 
Intervention Programme) and wider cross-agency efforts to promote social inclusion 

and diversity. 


The High-Level Framework for the Prevention of Violent Extremism recognised that tension 
can arise when social inclusion is used as a tool for countering violent extremism, because 
it can risk stigmatising and alienating communities, thereby undermining social cohesion 
efforts. The focus was therefore on interventions with people who were noticeably at risk of 
engaging in violent extremism. It included broader efforts to build: 


... strong, trust-based relationships with communities through proactive, broad-based 
engagement - ideally led by agencies with an enduring community presence and cultural 
capability. These relationships can then be accessed to engage on specific violent 
extremism issues in a targeting way if and where they arise. 


Progress was made in developing the multi-agency intervention programme. But the lack 
of specificity in what was being proposed for broader community engagement efforts meant 
that it was not clear what actions were to be taken, by when and by whom. There did not 
appear to be any consultation with community groups in the development of the High-Level 
Framework for the Prevention of Violent Extremism. 


National Risk Management 


In September 2015, after engaging with an expert panel, the Department of the 

Prime Minister and Cabinet produced a report recommending an approach and methodology 
for developing a National Risk Register. There was broad ministerial and interagency 
agreement for the development of a National Risk Register. 


A 2016 report by the Auditor-General recommended that the Department of the 
Prime Minister and Cabinet should improve governance of national security risks 
(especially to provide better definition and clearer accountabilities of risk governance 
and management).*? The Department of the Prime Minister and Cabinet responded to 
this in 2016 by developing a risk framework. 


By November 2016, over 30 Public sector agencies had undertaken indicative risk 
assessments and considered existing agency risk management arrangements across the 4Rs. 
These agencies identified gaps and connections, developed some credible event scenarios, 
and assessed the likelihood and potential impacts of these events occurring over the next 
five years. 





5? Office of the Controller and Auditor-General Governance of the National Security System (2016). 
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In June 2017, the Department of the Prime Minister and Cabinet established the National 
Risk Unit to develop a National Risk Register. The first draft National Risk Register was 
produced in August 2018. It comprises approximately 40 risk profiles, including the 
Terrorism Risk Profile, each of which includes a description, rating and risk management 
measures. Although not approved by ministers, the draft National Risk Register has been 
informally adopted by the Department of the Prime Minister and Cabinet and shared with 
Public sector agencies to be used as part of their agency planning and their development of 
risk mitigation processes. 


Following informal discussions with ministers in late 2018, officials recommended the 
release of the National Risk Report (a high-level summary of the National Risk Register) in 
January 2019. Officials suggested the audience for the National Risk Report would be key 
decision-makers in public and private organisations, including central and local government 
agencies, essential utilities and infrastructure providers. Officials suggested that its purpose 
would be to build public understanding and facilitate an open and transparent public 
debate about national risks. Despite strong recommendation from the Department of 

the Prime Minister and Cabinet, ministers did not agree to authorise public release of the 
National Risk Report. 


In December 2018, officials recommended to the Security and Intelligence Board several 
changes to terrorism risk management across Reduction and Response activities. 

These included the introduction of a new annual strategic risk management cycle, 
commencing with a Combined Threat Assessment Group terrorism threat assessment 

(see Part 8, chapter 4). The first annual Combined Threat Assessment Group terrorism threat 
assessment was produced in December 2019 but was not publicly released. Officials also 
recommended elevating the responsibility for setting the New Zealand terrorism threat level 
from the Head of the Combined Threat Assessment Group to the Director-General of Security. 
This change occurred in mid-2019. 


The government’s priorities for national security intelligence 


Two reviews into the intelligence system in 2009°° recommended setting clear intelligence 
collection priorities for all agencies involved in collecting intelligence for national security 
purposes. 


Before 2012, the Government Communications Security Bureau operated to requirements for 
collecting foreign intelligence set by the old Domestic and External Security Coordination 
system and endorsed by the Cabinet Committee of the same name.™ Other Public sector 
agencies involved in intelligence collection initially did not have similar set requirements. 





53 Michael Wintringham and Jane Jones National Security and Intelligence Framework for New Zealand (2009); Simon Murdoch 
Report to the State Services Commissioner: Intelligence Agencies Review (2009). 


54 Office of the Inspector-General of Intelligence and Security Report into Government Communications Security Bureau’s process 
for determining its foreign intelligence activity (2017). 
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In 2012 the first National Intelligence Priorities were developed for intelligence collection and 
assessment, and ranked to guide the level of effort. In 2012, counter-terrorism was set at a 
medium intelligence priority, as the threat of terrorism (as assessed by the Combined Threat 
Assessment Group) was “very low”. At the time, the Officials’ Committee on Domestic and 
External Security Coordination noted that the government’s priorities “will be supplemented 
by more specific papers to be approved at officials’ level (the national intelligence priorities 
papers)”. The National Intelligence Priorities were expected to be reviewed every two years. 


By March 2015, the Department of the Prime Minister and Cabinet had prepared a revised 
process for the continual review and updating of New Zealand’s National Intelligence 
Priorities and advised that it would work with partner agencies to “translate these high-level 
questions into agency-specific actions”. The Department of the Prime Minister and Cabinet 
recognised that this was needed in the absence of “an explicit overarching strategy for 

New Zealand’s intelligence community”. 


In September 2015, ministers agreed 16 National Intelligence Priorities to replace the 2012 
Priorities. The Priorities were in three groupings. Terrorist and violent extremist threats to 
New Zealanders at home and abroad were included in the high priority grouping. Ministers 
expected these National Intelligence Priorities would be used by chief executives to align the 
focus of intelligence sector efforts, prioritise work and reallocate additional resources when 
required. The associated Cabinet paper recorded expectations that the Priorities would 
support any specific warrants or other ministerial approvals required and ensure active 
sharing of information, expertise and resourcing across the New Zealand intelligence 
sector. They directed officials to “report back to Ministers in March 2016 on progress by the 
[wider intelligence sector agencies] in implementing the intelligence priorities, before the 
first annual report due to ministers in June 2016 on the performance of the intelligence 
sector delivering the priorities”. This reporting back did not occur. 


The Security and Intelligence Board agreed that the National Intelligence Coordination 
Committee would be responsible for the delivery of the Priorities overall and that it 

would focus on the top nine of the 16 Priorities (to set the intelligence requirements for 
assessment and collection). Eleven cross-sector intelligence Priority Coordination Groups 
were established, each with a coordinator. However, in October 2016 the Department of 
the Prime Minister and Cabinet reported to the Security and Intelligence Board that 

the “national intelligence priorities do not yet fully inform agency priority and planning 
processes”. It was also reported that the Priority Coordination Groups had delivered mixed 
results, as there was: 


a) neither a clear mechanism to provide assurance that customer requirements are being 
clearly communicated nor a consistent framework to assess progress or gaps; 


b) no coordinating mechanism to support better measurement of resource allocation and 
outputs against each National Intelligence Priority; and 


c) nocomprehensive framework to underpin any future queries about New Zealand 
Intelligence Community collection against specific issues or targets. 
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Faced with these problems, some Public sector agencies developed their own internal 
prioritisation guidance. For example, the New Zealand Security Intelligence Service 
compensated for this lack of clarity by developing its 170-Year Operational Strategy 
(Project Sterling) in 2016. This resulted in the establishment of a strategic analysis 
function (see Part 8, chapter 5). 


In 2017, the Department of the Prime Minister and Cabinet advised the Security and 
Intelligence Board that the intelligence prioritisation and coordination frameworks were 
not doing what they were designed to do. Following a new cross-agency process led by the 
Department of the Prime Minister and Cabinet, the Cabinet External Relations and Security 
Committee approved 16 equally-weighted National Security and Intelligence Priorities in 
December 2018. The paper seeking Cabinet approval of the new National Security and 
Intelligence Priorities noted that the Priorities would not prescribe how different agencies 
should implement their intelligence work plans. The paper observed that the actual level 
of an agency’s ability to deliver on the Priorities depends on legislation, resourcing and 
capability. Also in December 2018, the Security and Intelligence Board agreed to disestablish 
the Priority Coordination Groups and replace them with a new system for delivering the 
National Security and Intelligence Priorities, facilitated by Sector Coordination Groups. 


Despite their revised name, the National Security and Intelligence Priorities remain priorities 
for intelligence collection and assessment. An organising framework identified three types 
of intelligence and assessment effort and provided guidance on the relative focus for each of 
the priorities. These were: 


a) the priorities where specialised secret intelligence collection capabilities can add value 
(this included terrorism); 


b) the priorities where broader intelligence activities across a range of Public sector 
agencies are needed; and 


c) the priorities where intelligence activity focuses on reporting and assessment, rather 
than significant New Zealand intelligence collection. 


The 2012 and 2015 National Intelligence Priorities were expected to lead to prioritised 

areas of work and resources.°** The 2018 National Security and Intelligence Priorities were 
not designed to guide day-to-day operational and longer-term strategic decisions of the 
intelligence and security agencies or the other Public sector agencies involved in the national 
security system. 





55 New Zealand Security Intelligence Service The NZSIS 10-Year Operational Strategy (Project Sterling) (June 2016). 


5° Performance Improvement Framework, footnote 42 above. 
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We were told that the National Security and Intelligence Priorities may be used by some 
agencies as a point of reference but their high-level nature means they are not helpful for 
providing guidance on how to prioritise both within and across the Priorities (for example, 
foreign interference versus terrorism). We were also told that the 2018 restructure of the 
National Security and Intelligence Priorities into an equally-weighted alphabetical list made 
them less clear as priorities and few Public sector agencies appear to have incorporated the 
Priorities into their organisational plans.%” 


The Government Communications Security Bureau and the New Zealand Security Intelligence 
Service interpreted the National Security and Intelligence Priorities as the “government 
priorities” under the Intelligence and Security Act (see Part 8, chapter 14), setting the outer 
parameters of their intelligence activities. Beyond that, their relevance is unclear. In a 2018 
internal document, New Zealand Police expressed concerns about the costs of participating 
in the development of the National Security and Intelligence Priorities. They also had 
concerns about the “poor targeting of the performance framework”. 


The first three Sector Coordination Groups were established in February and March 2019 for 
the Priorities of foreign interference, Pacific regional security, and malicious cyber activity. 
Since 15 March 2019, responsibility for coordinating the terrorism National Security and 
Intelligence Priority is exercised jointly by the Counter-Terrorism Coordination Committee and 
the National Intelligence Coordination Committee. 


The 2018 terrorism National Security and Intelligence Priority 


The terrorism priority approved in December 2018 focused Public sector agencies on 
domestic as well as international terrorism threats. The domestic terrorism threats 

were described as “those that may arise in and against New Zealand or be carried out by 
New Zealanders overseas ... [and the] scope includes emerging trends and characteristics 
associated with overseas terrorist networks’ links to New Zealand”. The international 
terrorism threats were described as “threats against New Zealand’s interests overseas in 
areas that have the greatest exposure for New Zealanders, and the trends and characteristics 
of emerging regional and global terrorism threats” which may impact on New Zealand. We 
note that the concepts “domestic terrorism” and “international terrorism” are used in ways 
which appear to differ from our glossary definitions. 


This characterisation of terrorism as pervasive and not constrained by geographic distance 
and national boundaries was also reflected in the 2018 Counter-Terrorism Strategic 
Framework, which stated that terrorism is a threat that “New Zealand actively confronts, 
both globally and at home”. 





57 The New Zealand Security Intelligence Service The 2079 Terrorist Attacks in Christchurch: A review into NZSIS processes and 
decision-making in the lead up to the 15 March attacks (Arotake Review) (June 2019) at page 20. 
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3.5 Performance monitoring and oversight 


Performance monitoring 


Several reviews of components of the national security system (see Part 8, chapter 2) have 
highlighted the light-touch approach to performance monitoring as an issue that should be 
addressed.*® 


The 2011 New Zealand’s National Security System review stated that “given the significant 
spending on national security, government needs to ensure that it is achieving its goals in 
the most efficient manner possible”.°° Similarly, the 2014 Performance and Improvement 
Framework review stated that: 


... the performance challenge for the [New Zealand Intelligence Community] is to clarify 

the scope of its role and then to create more seamless collaboration and efficient resource 
allocation amongst individual agencies ... . In setting national security priorities and 
determining the scope of the [New Zealand Intelligence Community’s role], there should be 
a set of practicable and measureable targets ... against which the sector’s performance can 
be assessed.°° 


In 2017, the Department of the Prime Minister and Cabinet was working on a full set of 
performance measures for delivery of the National Intelligence Priorities approved in 2015 
and updated in 2016. It advised the Security and Intelligence Board that there were still no 
measures to demonstrate impact. It noted that one of the factors “stopping intelligence and 
assessment about the national intelligence priorities from informing decision-making and 
policy-making to the fullest extent” was that: 


... current priority descriptions are not clear enough, and don’t provide enough guidance 
around what areas are of most importance within the priority, why they are important and 
what outcomes are sought. This also inhibits the development of an effective performance 
framework. 


We also observed that performance measures (as recorded in some agencies’ annual reports) 
were subject to change between years. 


The current position is that there is still no performance framework in place to measure 
the efficiency and effectiveness of New Zealand’s intelligence community or counter-terrorism 
effort, or their delivery against the National Security and Intelligence Priorities. 





58 Simon Murdoch, footnote 9 above at page 26; Jacki Couchman, footnote 51 above. 
58 Simon Murdoch New Zealana’s National Security System (April 2011) Section V: Value for Money at page 15. 


eo Performance Improvement Framework, footnote 42 above. 
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The role of the central agencies 


In the New Zealand Public sector, the Department of the Prime Minister and Cabinet, 
Te Kawa Mataaho Public Service Commission (formerly the State Services Commission) 
and the Treasury are collectively called the central agencies. 


Central agency oversight has involved a focus on advising chief executives how to achieve 
system-wide leadership and system results. The efforts of the central agencies, particularly 
Te Kawa Mataaho Public Service Commission and the Department of the Prime Minister and 
Cabinet, have concentrated on removing barriers to good performance and encouraging 
relevant parts of the Public sector to work together. 


The Public Service Commissioner has had an oversight role in relation to leadership and 
governance of the intelligence and security agencies since the enactment of the Intelligence 
and Security Act. The Public Service Commissioner’s functions include acting as the 
employer of chief executives and reviewing the performance of departments. This involves 
considering the overall performance of the chief executive and the agency. It may also 
include specific matters for performance development and feedback, as agreed with the 
chief executive, but does not extend to an ongoing assessment of the operational decisions 
of the agencies. An Assistant Commissioner at Te Kawa Mataaho Public Service Commission 
told us it was not the role of Te Kawa Mataaho Public Service Commission to monitor the 
collective performance of the counter-terrorism agencies nor the Public sector agencies 
involved in the counter-terrorism effort. 


A senior manager at the Treasury advised that while the Treasury monitored the financial 
performance of Public sector agencies (at the appropriation level), it does not monitor the 
outcomes or outputs that agencies produce with this funding. The Public Finance Act 1989 
makes chief executives responsible for what is achieved with their resources. 


The Department of the Prime Minister and Cabinet advised that it is “not its role or 
mandate to monitor national security and intelligence sector agencies’ performance 
against [the National Security and Intelligence Priorities]”, rather it is interested in 

“how the sector performs in relation to collectively providing intelligence and assessment 
to support decision-making”. This includes the counter-terrorism effort. 


Oversight by the Office of the Auditor-General 


The Office of the Auditor-General carries out annual audits of Public sector agencies’ 
financial reports. The Auditor-General is usually responsible for auditing the performance 
of Public sector agencies to examine their efficiency and effectiveness. Performance audits 
provide the public with independent assurance that Public sector agencies are delivering 
what they have been asked to and are operating lawfully. 
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Under the Public Finance Act 1989, Public sector agencies must provide financial and 
performance information to the Auditor-General at the end of each financial year for 

audit. But the intelligence and security agencies are not required to provide end-of-year 
performance information to support the annual appropriations (funding) legislation.” The 
Office of the Auditor-General has interpreted this to mean that the intelligence and security 
agencies are excluded from the Public Finance Act requirement to provide performance 
information for audit by the Auditor-General. The Treasury has confirmed this interpretation. 
The Auditor-General does not, therefore, audit the performance or operational effectiveness 
of the intelligence and security agencies. 


Oversight of the intelligence and security agencies 


Significant oversight of the Government Communications Security Bureau and the 
New Zealand Security Intelligence Service is specified in the Intelligence and Security Act. 


Because the Intelligence and Security Act gives broad powers to the Government 
Communications Security Bureau and the New Zealand Security Intelligence Service to 

fulfil their functions and objectives, robust and multi-layered oversight is important. The 
Inspector-General of Intelligence and Security and the Parliamentary Intelligence and 
Security Committee are the primary external oversight mechanisms for the Government 
Communications Security Bureau and the New Zealand Security Intelligence Service. Both of 
these oversight bodies were established by legislation in 1996 and are now governed by the 
provisions of the Intelligence and Security Act (see Part 8, chapter 14 for more information on 
the oversight roles of these bodies). 


3.6 Developments since 15 March 2019 


Cabinet approved a high-level Countering terrorism and violent extremism national strategy 
overview in September 2019, which was published on the Department of the Prime Minister 
and Cabinet’s website in February 2020.® It: 


a) identifies broad, thematic counter-terrorism activities focusing on Reduction but also 
includes Readiness, Response and Recovery; 


b) identifies the importance of public engagement and a public information plan; and 
c) recognises the linkage to social cohesion activities. 


It was not developed in consultation with communities, local government and the private 
sector. 





5 public Finance Act 1989, section 45D. 
62 Public Finance Act 1989, section 15A(4)(a). 


3 Department of the Prime Minister and Cabinet, footnote 49 above. 
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3.7. Gaps in the leadership and oversight of the 
counter-terrorism effort 


Lack of political ownership and informed public debate 


There has been limited political ownership of, and public discussion on, the threat and 
risks of domestic terrorism in New Zealand. And the overall counter-terrorism effort is 
not well understood by most ministers, other politicians, the wider public service or the 
New Zealand public. 


Any public discussion has largely focused on controversies that have caused embarrassment 
for intelligence and security and law enforcement agencies (see Part 8, chapter 2). The few 
public-facing documents produced about the counter-terrorism effort are not particularly 
revealing and did not actively engage the public. This means there has been little informed 
public debate about the threat of domestic terrorism, what is done on behalf of the public 
by the Public sector agencies involved in the counter-terrorism effort and how the public 
can contribute. 


Absence of strategic analysis and advice across the counter-terrorism effort 


Good Public sector management practice includes following and implementing relevant 
regulatory frameworks, existing policy, operational guidance and administrative procedures 
in ways which give effect to their intended purposes. 


In addition, the public service has a duty of stewardship to look ahead and provide advice 
about future challenges and opportunities New Zealand faces. It is the responsibility of 
chief executives to steward their agency’s capability, and capacity to offer free and frank 
advice. This involves providing proactive advice on emerging problems, vulnerabilities and 
opportunities for policy performance improvement. In many New Zealand Public sector 
agencies, these functions are exercised by strategic policy teams. 


It is not clear who holds responsibility to look across the counter-terrorism effort to identify 
such risks and gaps and provide advice to ministers. Although the Department of the Prime 
Minister and Cabinet has a national security policy team, it does not exercise this role. 
Despite this role being in the Security and Intelligence Board’s Terms of Reference it has 

not carried it out (see 3.3 Leadership and coordination). The assessment agencies provide 
ministers with intelligence products, but they stop short of providing advice on what to do 
about the risks or opportunities that may be identified in those products. That responsibility 
falls on the policy or operational agency relevant to the specific issue (see Part 8, chapter 4). 
This is due to a separation of assessment from policy making. We heard from one minister 
that they were surprised and frustrated by this arrangement and the effect was that ministers 
received threat assessments without proposed policy or operational responses. 
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The minutes of the Security and Intelligence Board and the Counter-Terrorism Coordination 
Committee do not demonstrate that these interagency coordinating groups were working 
together to provide collective insights from assessments. 


Limited availability of external advice 


New Zealand’s National Security Handbook observes that “local government, 
quasi-government agencies, and the private sector have increasingly important roles in 

the public sector”. Think tanks focused on national security issues are an example of such 
“quasi-government agencies”. They are an established feature of the national security 
landscape overseas. Such organisations can encourage and inform public debate, facilitate 
interaction between the private and public sector and offer contestable external advice to 
government and Public sector agencies. 


We did not observe similar relationships between the New Zealand national security 

system and think tanks in relation to counter-terrorism. Although there are think tanks in 
New Zealand that focus on national security issues, such as the Centre for Strategic Studies, 
they do not appear to be utilised by Public sector agencies involved in the counter-terrorism 
effort in the ways that such bodies are in other countries. 


No system-level standards or performance monitoring 


There is no framework for setting system-level performance standards and accepted best 
practice for the counter-terrorism effort. This means there is no way to monitor performance 
or measure the effectiveness of the counter-terrorism effort as a system or to hold 

Public sector agencies to account if their contributions do not meet the standards. 





64 Allan Gyngell “The Rumble of Think Tanks: National Security and Public Policy Contestability in Australia” in War, Strategy and 
History: Essays in Honour of Professor Robert O’Neill edited by Daniel Marston and Tamara Leahy (ANU Press, Acton, Australia, 
2016) at pages 265-284. 
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3.8 Concluding comments 


100 Leadership and coordination of New Zealand’s decentralised counter-terrorism effort is 
non-directive. The Department of the Prime Minister and Cabinet’s leadership role was never 
more than coordination of the multi-agency counter-terrorism effort. 


101 Between 2014 and 2019 progress was made: 
a) Anew ministerial portfolio for national security and intelligence was created in 2014. 
b) The Specialist Coordinator for the counter-terrorism effort was appointed in 2016. 


c) The Intelligence and Security Act 2017 was passed, which reformed the intelligence and 
security agencies’ authorising environment. 


d) A National Risk Register was developed in 2018. While the Register has not yet been 
approved and published by the government, the risk profiles are being used by officials 
to support a more strategic and proactive approach to risk management. 


e) Amore clearly defined interagency counter-terrorism work programme was 
progressed by the Security and Intelligence Board in 2018 (largely driven by the 
Specialist Coordinator). 


f) The Security and Intelligence Board approved the Counter-Terrorism Strategic Framework 
and the High-Level Framework for the Prevention of Violent Extremism in 2018. 


102 However, there have been significant challenges and, as just described, there are gaps in the 
leadership and oversight of the counter-terrorism effort that have yet to be addressed. 


103 Inlater chapters we will discuss how this has played out in practice, in particular between 
the counter-terrorism agencies as to their respective roles and coordination of activities, 
online capability, target discovery and information sharing. 
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Chapter 4: Assessment of the terrorism 
threatscape 


4.1 Overview 


Our Terms of Reference required us to make findings as to whether relevant Public sector 
agencies failed to anticipate or plan for the terrorist attack due to an inappropriate 
concentration of counter-terrorism resources or priorities on other terrorism threats. 


Making informed decisions about where to concentrate counter-terrorism resources requires 
a comprehensive understanding of the threatscape. Critical to this is strategic intelligence 
assessment on the threat of terrorism. Such assessment enables the counter-terrorism 
effort to scan the horizon to look for new and emerging threats. It lifts the focus from today’s 
presenting threat and reminds operational agencies of the need to anticipate future threats. 


In this chapter we: 


a) review the role and expectations of the two agencies whose primary function is to 
produce intelligence assessments - the National Assessments Bureau and the 
Combined Threat Assessment Group; 


b) discuss the development of a national assessments programme and the focus 
and capacity of the National Assessments Bureau and the Combined Threat 
Assessment Group; 


c) set out the gaps we observed in the assessment system; 
d) scrutinise the perception of the terrorism threatscape before 15 March 2019; 


e) examine the perception of the threat of right-wing extremist terrorism before 
15 March 2019; and 


f) describe the terrorism threat level assessments. 


Other agencies also have assessment functions. The New Zealand Security Intelligence 
Service’s Strategic Intelligence Analysis team, established in 2016, is discussed briefly in this 
chapter, but in more depth in Part 8, chapter 5. New Zealand Police’s assessment function 
is discussed in Part 8, chapter 6. In Part 8, chapter 9, we discuss practices related to the 
sharing of strategic intelligence assessments across Public sector agencies. 


4.2 Roles of the National Assessments Bureau and the 
Combined Threat Assessment Group 


The National Assessments Bureau and Combined Threat Assessment Group combine multiple 
pieces of intelligence from various sources (for example, intelligence from other Public sector 
agencies and international partners) to produce assessments. 


444 


The National Assessments Bureau is part of the Department of the Prime Minister and 
Cabinet (see Part 8, chapter 3). The National Assessments Bureau provides medium to 
long-term assessments on a broad range of issues. These include, but are not confined to, 
terrorism. Its products are generally designed to inform policy formation and 
decision-making. The National Assessments Bureau does not make recommendations or 
offer advice in relation to its assessments. This is done by policy agencies responsible for 
the specific policy issue (such as the Ministry of Business, Innovation and Employment, 
the Ministry of Foreign Affairs and Trade and the Ministry of Justice). 


The Combined Threat Assessment Group is an inter-agency group hosted by the 

New Zealand Security Intelligence Service. The Combined Threat Assessment Group’s 
mandate is to assess threats from terrorists likely to result in harm to New Zealand, its 
citizens or interests, both domestically and internationally. As is the case with the 
National Assessments Bureau, it does not make recommendations or offer advice in 
relation to its assessments. The Combined Threat Assessment Group supports agencies 
such as New Zealand Police and the Ministry of Foreign Affairs and Trade to make tactical 
or operational decisions. That said, the Combined Threat Assessment Group sometimes 
provides broader strategic assessments, such as its New Zealand Terrorism Threatscape 
assessment. 


The Combined Threat Assessment Group’s terrorism mandate is more focused than that 

of the National Assessments Bureau. We were told that the National Assessments Bureau 
was not focused on the domestic terrorism threatscape because of an agreed division 

of effort with the Combined Threat Assessment Group. There is however, no written 
memorandum of understanding or other formal agreement to this effect. In 2012, 2016 

and 2018 the National Assessments Bureau produced strategic intelligence assessments 
used to inform the development of the National Security and Intelligence Priorities, including 
the terrorism priority (See Part 8, chapter 3). 





°5 The Combined Threat Assessment Group also has a mandate for assessments relating to violent protest in New Zealand and 
abroad, but this forms a minimal part of its work. 
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Figure 43: How intelligence assessments are prepared 


Ea) Plan - tailoring to decision-makers’ needs and priorities 


@Q) Research and pull threads together, using: 


* open-source material 
¢ material from other Public sector agencies 
* secret intelligence, including: 
- human intelligence 
- signals intelligence 
- reporting from Five Eyes and other international partners 
- reporting from other agencies 


[7 Develop and test lines of analytical judgement 





[= Write assessment or briefing 
Vv) Publish assessment or give briefing 
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4.3 Expectations of the National Assessments Bureau and the 
Combined Threat Assessment Group 


Expectations of the National Assessments Bureau have been established through Cabinet 
decisions and legislation. 


In 2010, Cabinet amended the mandate of the National Assessments Bureau to enable 

its Director to “deliver assessment products that call on resources of all [New Zealand 
Intelligence Community] agencies and are relevant to all aspects of Cabinet-agreed national 
security agenda and priorities”. Cabinet also made the Director of the National Assessments 
Bureau responsible for the “development of a national assessment programme that 

includes domestic and external intelligence” and for “leading the [New Zealand Intelligence 
Community] in delivering the national assessments programme as mandated by Cabinet and 
ensuring effective integration of agency contributions to it”. 


The Intelligence and Security Act 2017 provides for the chief executive of the 

Department of the Prime Minister and Cabinet to designate an employee to undertake 
“intelligence assessments on events and developments of significance to New Zealand’s 
national security, international relations and well-being and economic well-being to 
Ministers, departments and any other persons considered appropriate and advising 
departments on best practice in relation to the assessment of intelligence”.© In practice, 
this is delegated to the Director of the National Assessments Bureau. 


A 2012 review of the Combined Threat Assessment Group noted its core function should be 
to enable intelligence and security agencies to recognise and address threats arising from 
terrorism that are likely to require a multi-agency operational response.®” A follow up review 
in 2018 stated that “evidence about possible attacks in New Zealand” has “brought a greater 
focus to the homeland security risk environment”, such that there is “a need to expand our 
own indigenous threat intelligence effort”. 





°6 Intelligence and Security Act 2017, section 233. 
87 Simon Murdoch Review of CTAG (April 2012) at page 4. 


88 simon Murdoch CTAG 2018: Its placement in New Zealand’s counter-terrorism system architecture and its location; an 
independent view (27 July 2018). 
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In addition, the terrorism National Security and Intelligence Priority as agreed through 
Cabinet decisions of 2012, 2015, 2016, and 2018 set broad parameters for the assessment of 
intelligence with respect to terrorism threats. The parameters of the 2018 terrorism Priority 
provide for: 


The assessment of intelligence to identify and understand domestic terrorism threats ... 
[for] domestic terrorism scope includes emerging trends and characteristics associated with 
overseas terrorist networks’ links to New Zealand. Beyond domestic threats, the narrower 
international scope of this Priority focuses on the use of intelligence and assessment to 
identify and understand terrorist threats against New Zealand’s interests overseas ... and 
the trends and characteristics of emerging regional and global terrorism threats, which may 
impact New Zealand, New Zealand’s interest and New Zealanders. 


Effective identification of emerging threats requires capability and capacity to look five to 
ten years ahead (horizon scanning). In 2003, the then Auditor-General reported that an 
“over the horizon” function was critical to New Zealand’s national security system. 


4.4 Anational assessments programme? 


As noted, in 2010 Cabinet mandated the development of a national assessments programme 
led by the National Assessments Bureau with functions extending to the assessment of 
intelligence on domestic as well as international issues. Between 2011 and 2012, some 
progress was made in fulfilling the Cabinet mandate. The separate but associated 

National Assessments Committee, chaired by the Director of the National Assessments 
Bureau and comprised of eleven members,” coordinated the production of ten national 
security assessments on threats to New Zealand’s security, including terrorism. 


In May 2013, the National Assessments Bureau presented a paper to the Officials’ Committee 
for Domestic and External Security Coordination. The paper proposed that the 

National Assessments Bureau would implement its changed mandate, and progress a shared 
national assessments programme, by reshaping the National Assessments Committee so 
that it had greater emphasis on tasking, oversight and quality assurance for assessment 
reporting. 


Several high quality assessments focused on New Zealand’s domestic terrorism environment 
were produced during this time (2013-2014) through the National Assessments Committee. 
These included a report by the New Zealand Security Intelligence Service and two reports 
from New Zealand Police, which discussed the terrorist threat posed by the extreme 
right-wing. 





69 Office of the Controller and Auditor-General, footnote 8 above at pages 39-40. 

7° The National Assessments Committee comprised the Combined Threat Assessment Group, the Department of the Prime Minister 
and Cabinet, the Government Communications Security Bureau, Immigration New Zealand, the Ministry of Defence, the Ministry 
of Foreign Affairs and Trade, New Zealand Customs Service, the National Assessments Bureau, the New Zealand Defence Force, 
New Zealand Police and the New Zealand Security Intelligence Service. 
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In 2014, the National Assessments Committee was replaced by the National Intelligence 
Coordination Committee. Our review of the National Intelligence Coordination Committee’s 
meeting minutes since 2016 show that it was predominantly focused on the coordination 
and implementation of the National Security and Intelligence Priorities, with little attention 
devoted to a coordinated national assessments work programme. We have seen no 
evidence of a coordinated national assessments programme since 2014, despite it being the 
responsibility of the National Assessments Bureau - as directed by Cabinet - to ensure there 
was such a programme. 


4.5 Focus of the National Assessments Bureau 


The threat of domestic terrorism was not a priority for the National Assessments Bureau 
and it did not provide any assessments solely focused on domestic terrorism. 


The National Assessments Bureau’s focus was geopolitics and security dynamics within 
different countries and regions and what they meant for New Zealand’s national security 
interests. It tended to concentrate more on the foreign policy and trade aspects of national 
security, rather than the domestic aspects (though there is overlap between the two). 


In response to feedback from the agencies using their intelligence products, the 

National Assessments Bureau became increasingly customer focused after February 2013. 
We were told that assessments are of no value unless they are supporting decision-making 
and that if someone “is not really interested in reading [an assessment], then you have to 
ask yourself, what is the value, what is the point [of the assessment]”. 


This meant the National Assessments Bureau primarily addressed topics or themes on which 
its customers - usually the Ministry of Foreign Affairs and Trade - had asked for assessments. 
This explains its focus on foreign policy, security and trade issues, as highlighted by the 2014 
Performance Improvement Framework review of the New Zealand Intelligence Community. 
That review observed that the National Assessments Bureau’s customers were reluctant to 
accept a reduction in foreign policy assessments in favour of a greater attention to national 
security issues.” We heard from Howard Broad, former Deputy Chief Executive of the 
Department of the Prime Minister and Cabinet, that: 


[When] you start to press [the National Assessments Bureau] on domestic issues and the 
relationship between foreign and domestic ones, they run out of legs a bit. We didn’t have 
the capability. 





” Performance Improvement Framework, footnote 42 above at page 23. 
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4.6 Focus of the Combined Threat Assessment Group 


We were told that, before 15 March 2019 “the vast numerical majority of [the Combined 
Threat Assessment Group’s] product [was] focused internationally”. Of the products that did 
focus substantively on the New Zealand terrorism threatscape, most were tactical reports 
about security arrangements for visiting international dignitaries. Increased demand for 
these tactically-focused threat assessments meant the Combined Threat Assessment Group 
lacked the capacity to produce in-depth strategic assessments on the domestic terrorism 
environment. The New Zealand Security Intelligence Service told us that in response, 

from late 2017, its Strategic Intelligence Analysis team assumed the function of strategic 
assessment for counter-terrorism. Even so, the primary focus of the Strategic Intelligence 
Analysis team was guiding the operational activity of the New Zealand Security Intelligence 
Service. This meant it performed a different function to the Combined Threat Assessment 
Group, whose assessments are intended to inform the approach to counter-terrorism at 

a whole-of-system level. We discuss the Strategic Intelligence Analysis team more below 
and in Part 8, chapter 5. The New Zealand Security Intelligence Service told us that in 

June 2020 the strategic assessment function was transferred to the Combined Threat 
Assessment Group. 


Of the Combined Threat Assessment Group’s regular domestic products, the National 
Terrorism Threat Assessment has the most significant implications for the counter-terrorism 
effort. It informs the approach to counter-terrorism at a whole-of-system level. The National 
Terrorism Threat Assessment is comprised of two components - the threat narrative, which 
describes the terrorist threatscape in New Zealand and internationally, and the threat level, 
which assesses the likelihood of a terrorist attack in New Zealand. 


In the second half of 2018, the Counter-Terrorism Coordination Committee chaired by the 
Specialist Coordinator (see Part 8, chapter 3) reviewed the terrorism risk management 
system, including the relationship between threat assessment, risk assessment and risk 
mitigation. One weakness they identified was the lack of an annual national terrorism threat 
assessment. A subsequent draft Cabinet paper said that: 


... Moving to an annual assessment would support a more deliberate and systematic 
approach to counter-terrorism. If done well it will have the potential to better inform 
counter-terrorism system gaps and priorities. 
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26 In December 2018, a paper to the Security and Intelligence Board proposed the “production 
by [the Combined Threat Assessment Group] of an annual New Zealand terrorism threat 
assessment to inform security posture and as a key input to support determination of 
counter-terrorism priorities”. This was seen as the “key starting point” for the terrorism 
risk assessment cycle and was proposed to be a “strategic assessment document that 
provides a comprehensive picture of the New Zealand terrorism threatscape”. The Security 
and Intelligence Board then confirmed that the Combined Threat Assessment Group would 
produce an annual New Zealand terrorism threat assessment and “[a]greed that a regular 
terrorism threat statement/update would be published”. It is unclear from the meeting 
minutes whether this meant published for officials only or for the public. 


4.7 Capacity of the National Assessments Bureau and the 
Combined Threat Assessment Group 


National Assessments Bureau 


NO 
NI 


For much of its existence, the National Assessments Bureau has had a full-time equivalent 
staff of 30, including 21 analysts split across three teams, each with a manager and overseen 
by a director. The National Assessments Bureau seldom reached full analytical capacity, 
partly because of the significant time lag in bringing staff on board, which was contributed 
to by the lengthy security clearance process. We were told that in 2015 staffing was so low 
as to be below a credible minimum. 


NO 


8 The 2016 Strategic Capability and Resourcing Review had envisaged growing the strategic 
assessments function from 21 analysts to 34 over four years. But reprioritisation over the 
past five years saw the increased resourcing shift to other areas. In July 2019, there were 
only three more analysts (and a further four recruitments in progress) at the National 
Assessments Bureau than there were before the Strategic Capability and Resourcing Review. 
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Combined Threat Assessment Group 


29 ~=6For much of its existence, the Combined Threat Assessment Group has had a full-time 
equivalent staff of five to seven analysts plus a manager, usually seconded from the wider 
New Zealand Intelligence Community or international partner agencies. A 2012 review of the 
Combined Threat Assessment Group commented on its capacity issues.” At that time it had 
an acting manager, plus five seconded staff. 





30 We were told that the secondee model for the Combined Threat Assessment Group has its 
strengths, contributing to agency diversity, experience, access to systems and relationships. 
However, it also creates vulnerabilities as the workforce can be subject to staff turnover and 
associated lack of institutional memory. Some agencies have not replaced secondees or 
there have been gaps between secondments. 





” Simon Murdoch, footnote 68 above at page 13. 
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To mitigate these vulnerabilities, the New Zealand Security Intelligence Service has increased 
its contribution to the Combined Threat Assessment Group staffing, management and 
governance since the 2012 review. It now contributes six staff to the Combined Threat 
Assessment Group (only two of whom are funded by a cost-sharing arrangement between 
contributing agencies). More recently the Combined Threat Assessment Group has hosted 
secondees from New Zealand’s Five Eyes partners. Despite the New Zealand Security 
Intelligence Service’s increased contribution, the Combined Threat Assessment Group’s 
overall capacity had not improved since the 2012 review. 


We were told that nine months after 15 March 2019, the Combined Threat Assessment Group 
still had the same number of staff (six analysts) as before the terrorist attack and that 
having six to eight analysts split across the domestic and global environments presented 
“real capacity challenges”. It was suggested to us that a modest expansion of three to four 
analysts would improve the Combined Threat Assessment Group’s capacity to assess threats 
to New Zealand, domestic and international. 


4.8 Gaps in the assessment system 


Lack of a national assessments programme 


The National Assessments Committee offered a promising vehicle for the coordination of 

a national assessments programme, but it was disbanded in 2014. Its replacement, the 
National Intelligence Coordination Committee, was predominantly focused on coordinating 
the implementation of the National Security and Intelligence Priorities. As a result, there is 
no coordinated national assessments programme. 


Greater coordination and integration of the assessment function is required. One way of 
achieving this would be to co-locate or combine the National Assessments Bureau and 
the Combined Threat Assessment Group. Both agencies have an independent assessment 
mandate, while operating within other agencies. They use similar methods and in some 
areas their products overlap. To encourage more integration of the assessment function, 
the 2016 Cullen-Reddy Report recommended that the government review the current 
placement of the Combined Threat Assessment Group within the New Zealand Security 
Intelligence Service and consider whether it might be more appropriately situated within 
the National Assessments Bureau.” This review does not appear to have been done. 

We return to this question in Part 10: Recommendations. 





73 Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM, footnote 38 above at page 60. 
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Lack of regular strategic assessment of the threatscape 


The lack of a regular system-wide strategic assessment of the threatscape was identified 
by the Department of the Prime Minister and Cabinet in a 2014 paper to the Security and 
Intelligence Board. This paper reported that there was a “lack of understanding of the 
potential changes and future developments in the New Zealand security environment”. 
The paper also: 


a) noted that the Combined Threat Assessment Group assessments “tell us what the 
threat level is now” and that “planning and investment for the medium-to-long term 
could be hampered by a lack of ongoing assessment of terrorism trends and activity in 
New Zealand, including trends relating to terrorist tactics, weapons and methods”; and 


b) recommended that the National Assessments Committee produce an assessment of 
the New Zealand terrorism threatscape at least annually, with a focus on Islamist 
extremist terrorism and violent extremism, including assessing trends over the coming 
three to five years. 


An assessment of the domestic threat from Islamist extremist and other sources of terrorism 
was produced in 2014, including trends over the coming three to five years, but this 
assessment was not repeated. 


In July 2015 the Combined Threat Assessment Group produced the New Zealand Terrorism 
Threatscape. An updated version of this assessment, although scheduled for July 2017, 
was not produced until January 2018 (due to a lengthy review and consultation process). 
During this period, the National Assessments Bureau produced no strategic intelligence 
assessments of New Zealand’s terrorism threatscape. 


The New Zealand Security Intelligence Service’s Strategic Intelligence Analysis team began 
producing its quarterly New Zealand Terrorism Updates in December 2017. 


We were told that the New Zealand Security Intelligence Service’s baselining project 
(see further below and Part 8, chapters 5 and 10) was initiated, in part, to compensate 
for the lack of strategic intelligence assessments on the evolving terrorism threatscape 
produced elsewhere in the system. 
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Limited horizon scanning capability 


Seventeen years after the 2003 Auditor-General review had reported that an “over the 
horizon” capability was critical to New Zealand’s national security system (see 4.3 Roles 
of the National Assessments Bureau and the Combined Threat Assessment Group), the 
intelligence assessment agencies (and indeed the entire national security system) are still 
lacking capability in this area. 


We heard from several senior officials about their concern with the lack of horizon scanning 
capability and capacity in New Zealand’s national security system. We were told that the 
National Assessments Bureau’s “focus and resourcing did not prepare it particularly well for 
that longer-term work”. That same person reflected: 


What | don’t see across [the National Assessments Bureau and the Combined Threat 
Assessment Group] is a foresight function designed to look beyond the tactical and say, 
five to ten years out. ... | don’t see the teams who are using data analytics tools or good 
quantitative data; a lot of it is judgement and pulling pieces of covert data together. 


Andrew Kibblewhite, former Chief Executive of the Department of the Prime Minister and 
Cabinet, agreed that the national security system’s capability to regularly scan the horizon 
in the medium to long term for emerging threats and matters of strategic importance was 
not well developed. He said it was done “in bits and pieces in the system at the moment”. 
Howard Broad, former Deputy Chief Executive of the Department of the Prime Minister 
and Cabinet, said that the Security and Intelligence Board sometimes engaged in horizon 
scanning, but it “was not systematic”. He noted that, “to some extent”, dedicated horizon 
scanning was “an expectation placed on the National Assessments Bureau”. 


We were told that Singapore, the United Kingdom and the United States of America have 
dedicated horizon scanning units that look five to ten years ahead, but that this is not the 
case in New Zealand because of the National Assessments Bureau’s limited resources and 
customer focus. 


Rebecca Kitteridge, the Director-General of Security, also commented on this gap: 


! always thought it would be tremendous ... if you had periodically, at the centre, a strategic 
look forward into what is the environment and what does that mean for us and what does it 
mean for our capability and resourcing and priorities, that gives you a natural forward look. 
You don’t have that at the moment. 
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Lack of assessment of the online world 


There was limited analysis by the National Assessments Bureau and the Combined Threat 
Assessment Group of the formative role of the internet in the radicalisation, mobilisation 
and preparation activities of terrorists. We have seen only one shared report in the past 
decade, published by the Combined Threat Assessment Group and the New Zealand Security 
Intelligence Service, that substantively assessed online extremist activity in New Zealand. 


Lack of focus on non-Islamist extremist threats 


As we will illustrate in the next section, in the years before 15 March 2019 the primary focus 
of intelligence assessment was on the presenting threat of Islamist extremist terrorism. 
Before 2018, assessments by the National Assessments Bureau and the Combined Threat 
Assessment Group did not feature the threat of non-Islamist extremist terrorism. 


When we asked Andrew Kibblewhite, former Chief Executive of the Department of the 
Prime Minister and Cabinet, about whether the system was looking beyond the risk of 
Islamist extremist terrorism, he told us: 


! would have expected the [New Zealand Security Intelligence] Service and [the Combined 
Threat Assessment Group] to be looking at the whole violent extremism terrorism type risk. 


If you'd said “is there a terrorist risk out of right-wing extremism?” | would have said “yes”, 
but ... | probably would have used the precise words “I don’t think we are that concerned 
about it [in New Zealand]. 


! would have thought that [right-wing extremism] would have been within what [the 
New Zealand Security Intelligence Service and the Combined Threat Assessment Group] 
would have scanned. It would have been within their scanning space. | wouldn’t have 
known how intensively they had scanned it. 


Andrew Kibblewhite noted further to us: 


a) [The Security and Intelligence Board] tended to be guided by experts (in this case 
mainly by [the New Zealand Security Intelligence Service and Combined Threat 
Assessment Group]) on matters of the terrorism threat; 


b) inthis case those experts were not identifying right-wing extremism as a particular risk; 
and 


c) this contributed to [the Security and Intelligence Board] itself not emphasising the 
importance of right-wing extremism as a risk. 
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Andrew Kibblewhite’s comments are understandable. For instance, the Combined Threat 
Assessment Group’s July 2015 New Zealand’s Terrorism Threatscape assessment was that 
Islamist extremist terrorism was the primary threat. This could be taken to imply that other 
threats had been assessed. As far as we can tell, this was not the case. 


4.9 Perceptions of the terrorism threatscape before 
15 March 2019 


A focus on international terrorism... 


In examining the terrorism threatscape as perceived before 15 March 2019, we have 
considered the assessments issued by the National Assessments Bureau, the Combined 
Threat Assessment Group, intelligence products from other agencies, and what we were told 
in interviews and by community members, including Muslim individuals and communities. 


The primary focus of terrorism intelligence assessments by the National Assessments Bureau 
and the Combined Threat Assessment Group was international terrorism. These assessments 
rarely discussed the domestic terrorism threat. 


Between 2010 and 2018 the National Assessments Bureau published just under 400 formal 
assessments on terrorism and/or violent extremism. None of these was solely focused on the 
threat of domestic terrorism. 


We were told that the National Assessments Bureau focused more on the international 
terrorism environment and less on the domestic terrorism environment because that was the 
agreed division of effort with the Combined Threat Assessment Group. 


The Combined Threat Assessment Group receives significant numbers of international partner 
intelligence assessments. Unsurprisingly, the vast majority of assessments distributed by the 
Combined Threat Assessment Group were internationally focused. Such assessments can be 
produced and distributed quickly. We were told that: 


a) atleast half of the effort of two senior staff in the Combined Threat Assessment Group 
(who were presumably supported by analysts within the Combined Threat Assessment 
Group) was on domestic terrorism; 


b) domestic reporting takes more time and requires more analysis and coordination 
(primarily with other Public sector agencies) than reporting on international terrorism; 
and 


c) therefore, the ratio of domestically-focused to internationally-focused assessments 
produced by the Combined Threat Assessment Group in a given year does not provide 
the full picture of its effort. 
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Most of the Combined Threat Assessment Group assessments that focused substantively 
on the domestic terrorism threat were reports about security arrangements for events 
and therefore were operational in character. There were few strategic assessments of 
the domestic terrorism environment. 


Threat assessments dealing with terrorism indicated that the terrorist threat to 

New Zealanders was greater when they were outside New Zealand. For example, in 2016, 
the National Assessments Bureau stated that “international terrorism is almost certain 

to remain a serious threat to New Zealanders, mostly abroad”. And in January 20718, the 
Combined Threat Assessment Group assessed that there was a higher general likelihood of 
a New Zealander being harmed in an international terrorist incident than one occurring in 
New Zealand. 


Andrew Kibblewhite, former Chief Executive of the Department of the Prime Minister and 
Cabinet and Andrew Hampton, Director-General of the Government Communications Security 
Bureau both confirmed the dominant focus for intelligence assessments about terrorism had 
been on international rather than domestic terrorism. 


..- primarily on the threat of Islamist extremist terrorism 


From 2010-2019 the intelligence assessments of the National Assessments Bureau and the 
Combined Threat Assessment Group considered the terrorist threat to New Zealand and 

New Zealanders as coming largely from Islamist extremism. So too did assessments from the 
New Zealand Security Intelligence Service and New Zealand Police. 


Such assessments reflected the rise of the new “main terrorist threat”, Da’ish, in the 
Middle East. As described in Part 8, chapter 2, the prevalence of lone actor terrorists 
inspired by Da’ish presented serious challenges for intelligence and security agencies 
around the world. 


There were numerous Da’ish and Al Qaeda-inspired attacks in Western countries, including 
in Denmark, France, the United Kingdom and Australia. Daish-inspired terrorism was a 
real threat in New Zealand, requiring at times the full focus of the resources available to the 
counter-terrorism agencies. 


From 2016 onwards, assessments continued to evaluate Islamist extremism as the primary 
terrorist threat to New Zealand and New Zealanders. For example: 


a) In 2016, a New Zealand Police intelligence report, New Zealand’s Islamist Extremist 
Landscape, stated that more New Zealanders were vulnerable to extremist messaging 
due to the pervasive nature of Da’ish’s propaganda, which had proven more effective at 
attracting disaffected young males than other extremist groups. 
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b) The Combined Threat Assessment Group’s 2018 assessment of the New Zealand terrorism 
environment stated that “in spite of ongoing losses in Syria and Iraq, [Da’ish] will 
continue to exert itself as a terrorist and insurgent group with international influence 
and reach ... the overall level of support for [Da’ish] among New Zealand-based Islamist 
extremists does not seem to have changed markedly ... though the manifestation of 
support for radical Islam continues to evolve”. 


c) The New Zealand Security Intelligence Service similarly concluded in 2018 that “[Da’ish’s] 
territorial decline has not had any marked impact on the New Zealand extremist 
environment”. 


d) Two papers produced by the National Assessments Bureau in 2018 discussed the 
“persistent threat from Jihadist terrorism”. 


During this period, there was also significant focus on the threat to New Zealand’s national 
security posed by the return of New Zealand citizens who had travelled to Syria or Iraq to 
engage with terrorist entities in both combat and non-combat roles (called “foreign terrorist 
fighters”). 


4.10 Perceptions of the threat of right-wing extremist terrorism 


Assessments in the wake of the 22 July 2011 Oslo terrorist’s attack 


In August 2011, one month after the Oslo terrorist’s attack, the Combined Threat Assessment 
Group shared an assessment from an international partner that assessed the potential - in 
terms of the availability of firearms - of a “Norwegian-style attack” occurring in that country. 


One month later, in September 2011, the Combined Threat Assessment Group issued a threat 
assessment titled Availability of Firearms in New Zealand to Terrorists, Violent Extremists 
and Acutely Disaffected Persons. The assessment judged that a terrorist or violent extremist 
could legally acquire firearms, including military style semi-automatic firearms, for use in an 
attack. It looked at New Zealand’s firearms licence vetting process and considered that it 
was beyond the scope of, and it would be unrealistic to expect, the vetting regime to reliably 
identify a terrorist, extremist or acutely disaffected person posing as a legitimate firearms 
applicant. The Combined Threat Assessment Group considered the assessment was timely 
in regard to assessing the potential for terrorists or violent extremists planning to threaten 
New Zealand’s hosting of the Rugby World Cup 2011. 


458 


66 


This assessment was not well received by some Public sector agencies. There were questions 
about whether the Combined Threat Assessment Group was stepping outside of its mandate 
in issuing an assessment that identified a vulnerability in the New Zealand system that 

was not tied to specific warnings or indicators. There was a strong suggestion that the 
Combined Threat Assessment Group was not the right agency “to be ‘auditing’ at this 

level - as distinct from making an input into a risk register which the agency with the 

main legal and financial/regulatory accountabilities has to maintain”.” 


In October 2011, the Department of the Prime Minister and Cabinet wrote to Mike Bush, 
then Deputy Commissioner of New Zealand Police, seeking New Zealand Police’s view on 
whether further firearms control measures were needed. A second letter is believed to have 
been sent to New Zealand Police in April 2012. New Zealand Police responded by providing 
statistics that highlighted that firearms crimes make up a small portion of total crimes 

and there had been a slight decrease in firearms crimes over the decade. After discussing 
the Combined Threat Assessment Group assessment with the Deputy Commissioner 

of New Zealand Police, and reviewing information provided by New Zealand Police, the 
Department of the Prime Minister and Cabinet concluded that the information did not 
indicate an immediate problem or reveal an urgent need for a review of firearms controls. 
As a result, no changes were made to fix the vulnerability that had been identified in the 
Combined Threat Assessment Group’s report. The Department of the Prime Minister and 
Cabinet did, however, encourage New Zealand Police to inform the Officials’ Committee for 
Domestic and External Security Coordination if the situation changed or New Zealand Police 
were of the view that firearms control needed to be re-examined. 





7 Simon Murdoch, footnote 68 above at page 9. 
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National Assessments Bureau assessments 


In 2013, the National Assessments Bureau produced an assessment titled Far Right Rising: 

A Dangerous Myth, which observed that during the European debt crisis, far right movements 
across Europe stepped up their anti-immigrant and anti-Muslim rhetoric. However, this 
assessment did not cover terrorism and/or violent extremism implications. Rather, it focused 
on the changing political landscape in Europe and what this might mean for New Zealand’s 
interests in trade, investment and immigration to the European Union. 


The National Assessments Bureau’s first comment on the terrorist threat of the extreme 
right-wing in New Zealand was in September 2018 in its Global Terrorism Update. In an 
annex to the main assessment was a small section on “extreme right terrorism”, in which 

it observed that “between 12 September 2001 and 31 December 2016 in the United States 

of America, there were more extreme-right incidents than Islamist terrorist incidents 
resulting in fatalities”. It concluded that there had been an emerging threat from extreme 
right-wing terrorism for some time, but groups were fragmented with limited international 
coordination. The assessment went on to note that “[e]xtreme-right-wing groups are present 
in New Zealand and have an online presence, but have not been active”. 


Combined Threat Assessment Group assessments 


In 2018 the Combined Threat Assessment Group noted the “limited intelligence coverage 

of extremist left-wing and right-wing groups internationally”. One of the reasons for that 
limited coverage was explained in an earlier Combined Threat Assessment Group paper from 
September 2017. It noted that it “rarely sights intelligence regarding right-wing extremist 
groups and this is likely due to Western jurisdictions defining this more as a law enforcement 
matter”. This was a reference to extreme right-wing attacks not necessarily being considered 
matters of national security in some countries. Rather, they were seen as matters for law 
enforcement authorities. So some of New Zealand’s international partners did not have a 
mandate to collect or assess intelligence on the extreme right-wing. 


In its January 2018 assessment of the New Zealand terrorism threatscape, the Combined 
Threat Assessment Group noted that: 


Open source reporting indicates the popularity of far right ideology has risen in the 
West since the early 2000s. Since 2074, the “new” right-wing movements have been 
strengthened by opposition to refugee settlements and Islamist extremist attacks in the 
West, especially in Europe and Scandinavia. 


[The Combined Threat Assessment Group] has not sighted any reporting to indicate 
[established New Zealand far right groups have] the intent or capability to promote 
their ideology by an act of terrorism. As has been evidenced in similar jurisdictions 
to New Zealand, an extreme right-wing lone actor attack remains a possibility, albeit 
a remote one. 
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Leaving aside the assessments to which we have just referred, the Combined Threat 
Assessment Group reported on the threat of extreme right-wing terrorism only in the context 
of intelligence products it had received from international partners between 2011 and 

15 March 2019. These were generally in connection with events, including international 
terrorist attacks motivated by extreme right-wing ideology (such as the murder of British 
Member of Parliament Jo Cox and the Finsbury Park Mosque and Quebec City Mosque 
terrorist attacks) and the designation of extreme right-wing groups (including National 
Action in the United Kingdom) as terrorist organisations. 


We were informed by the New Zealand Security Intelligence Service that the domestic and 
international partner agency information available to the Combined Threat Assessment 
Group on extreme right-wing threats before 15 March 2019 was “very limited compared to 
the amount of information related to Islamist extremism threats”. 


New Zealand Police assessments 


New Zealand Police were the first agency in New Zealand’s counter-terrorism effort to 
produce regular intelligence assessments on the extreme right-wing. Since the 1990s, 
New Zealand Police had been examining and reporting on individuals and groups that 
were assessed to be white supremacists. New Zealand Police increased their focus on and 
broadened their awareness of the extreme right-wing around 2009. 


From 2010 to 2014, New Zealand Police produced intelligence assessments on the criminal 
activities (including assault, theft and drug offending) of several extreme right-wing groups 
in New Zealand. The potential for members of these groups to commit acts of terrorism 
was not assessed. By 2013, New Zealand Police had identified more than 100 individuals of 
interest to New Zealand Police due to their links to extreme right-wing groups. 


Although New Zealand Police secondees to the Combined Threat Assessment Group would 
have had access to these New Zealand Police assessments, they do not appear to have 
formed the basis of the Combined Threat Assessment Group’s assessments. We have not 
seen evidence that they were brought to the notice of the National Assessments Bureau or 
the New Zealand Security Intelligence Service. The New Zealand Security Intelligence Service 
suggested to us that the reason why New Zealand Police assessments were not shared 

may have been that they were not seen as having a clear connection to national security. 
New Zealand Police told us that, at the time, they understood that the New Zealand Security 
Intelligence Service had no interest in or mandate to examine the extreme right-wing and 
thus they saw no reason to share the assessments. 


In 2014, a New Zealand Police assessment titled The Right-wing in New Zealand: Myth vs 
Reality was published by the National Assessments Committee. The paper assessed that 
while the actions of established extreme right-wing groups in New Zealand were confronting 
to wider society, there was no evidence to suggest they posed a national security threat. 
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Later in 2014, another New Zealand Police assessment titled Domestic Extremism: Unlikely 
but not out of the question was published by the National Assessments Committee. This 
assessed the risk to New Zealand from forms of extremism other than Islamist extremism. 

It reiterated that the far right was characterised by “discord and discoordination” and that 
experienced activists were unlikely to pose a risk to national security in the next three years. 
It noted that the growth of the internet allowed people to connect and reinforce their ideas 
and that it was hard to identify individuals of security concern outside the domestic activist 
environment because many of their characteristics and behaviours were found in the general 
population. It concluded that an extremist could purchase firearms or the components 

of an improvised explosive device with minimal risk of discovery and assessed there was 

25 to 50 percent chance of an extremist act. 


In both of these 2014 assessments, New Zealand Police addressed the possibility of firearms 
being used in a terrorist attack, specifically by the extreme right-wing. The first assessment 
noted a “propensity for [extreme right-wing] members to acquire and use firearms”. 

New Zealand Police concluded that the relative ease of access to semi-automatic firearms 
in New Zealand meant that a lone actor terrorist attack remained a possibility. In the 
second, New Zealand Police assessed “if someone has the intent, the relatively permissive 
environment for purchasing firearms and/or [improvised explosive device] components 

will allow them to develop actionable capability with minimal risk of discovery” (see Part 8, 
chapter 6 for more discussion on what New Zealand Police were doing about the extreme 
right-wing before 15 March 2019). 


New Zealand Police had given some thought to the possibility that Muslim communities in 
New Zealand could be the target of threats. In May 2018, an internal New Zealand Police 
report, National Security Situation Update, noted calls from Da’ish for attacks during 
Ramadan and observed: 


Internationally, Ramadan is also a time of increased risk for the Muslim community, due to 
either the backlash following terrorist events, the increased profile of the Muslim community 
during this period, or a combination of the two. In addition to vandalism, verbal 
altercations, and online harassment, this has also led to violence. During Ramadan in 2077, 
verbal harassment of Muslims escalated into a stabbing incident where two men were killed 
in Portland, USA, and a vehicle ramming attack on worshippers exiting the Finsbury Park 
Mosque in London, UK. 
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NZ Context 


The national terrorist threat level in New Zealand is currently assessed as LOW - an attack 
is possible, but is not expected. There is no intelligence as to any specific threat. 


However, this intelligence could be incomplete or the situation could change at short notice. 
Internationally, attacks have taken place with little warning. 


The Muslim community in New Zealand has experienced sporadic incidents of vandalism 
and abuse. While not frequent, incidents do create widespread concern among the 
community when they do occur, as well as attention from the media. 


so New Zealand Police’s last intelligence assessment related to extreme right-wing groups 
and activities was in 2015 but focused on an annual event and did not address national 
security issues. It was primarily a New Zealand Police document, but the Combined Threat 
Assessment Group was on the distribution list. New Zealand Police’s strategic intelligence 
capability declined after 2015, which we were told meant limited focus on counter-terrorism 
from its intelligence system. 


8: As we will discuss shortly, in late 2018 the New Zealand Security Intelligence Service 
sought the support of New Zealand Police with their project to establish a baseline picture 
of emerging domestic threats. This included a discussion to understand the interaction 
between each agency’s mandate on non-Islamist extremism (see Part 8, chapter 12). We 
were told that New Zealand Police took preliminary steps to undertake their own national 
assessment of the extreme right-wing environment but that effort on this work was still in its 
initial stages at the time of the 15 March 2019 terrorist attack. 


New Zealand Security Intelligence Service assessments before 2018 
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In December 2011, the New Zealand Security Intelligence Service observed the “notable 
increase in groups across Europe espousing hard-line nationalist and anti-immigration 
rhetoric” and the resurgence of neo-Nazi groups in the United States of America and Europe. 
It assessed that the Global Financial Crisis and New Zealand’s economic and immigration 
policies could “stir up extreme right-wing and/or nationalist groups [in New Zealand] to 
protest against perceived increasing inequalities and lead to the adoption of more violent 
methods to effect political change”. In 2014, the New Zealand Security Intelligence Service 
assessed non-|slamist extremist domestic terrorism as a threat, “although comparatively 
minor”. The threat of right-wing extremist terrorism was not further addressed until 2018, 
just ahead of the New Zealand Security Intelligence Service baselining project. 
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Reports received from the Government Communications Security Bureau 


Before 15 March 2019, the Government Security Communications Bureau had no specific 
intelligence about a heightened risk to New Zealand’s national security from the extreme 
right-wing or requests from other Public sector agencies to investigate the matter. The 
Government Communications Security Bureau has emphasised to us (see Part 8, chapter 7) 
that: 


[The Government Communications Security Bureau] is not a lead agency nor an assessment 
agency for counter-terrorism, [so] it is not [its] role to assess the prevalence of right-wing 
extremism in New Zealand. [The Government Communications Security Bureau] carries 

out intelligence collection and analysis activities at the request of the other New Zealand 
government agencies which have the lead on the counter-terrorism priority. 


The Government Communications Security Bureau informed us that in the second quarter 

of the 2018-2019 financial year, it received 7,526 intelligence reports from international 
partners about terrorism and violent extremism. None of those reports related to right-wing 
extremism. 


New Zealand Security Intelligence Service baselining project 


The New Zealand Security Intelligence Service started a project to develop a baseline picture 
of emerging terrorism threats in May 2018. We describe this baselining project in greater 
detail in Part 8, chapters 5 and 10. 


The extreme right-wing was identified as requiring further attention due primarily to global 
terrorist incidents and trends. The New Zealand Security Intelligence Service sought to 
identify any similar potential threats in New Zealand. This involved a 12 month project 
focusing on right-wing extremist activity in New Zealand, which started in May 2018. 

In July 2018, the New Zealand Security Intelligence Service produced its Information & 
Intelligence Requirements Extreme Right-wing (XRW) Activity in New Zealand. This set out 
the state of the New Zealand Security Intelligence Service’s knowledge and the intelligence 
gaps and questions to be addressed. We discuss this further in Part 8, chapter 5. 


New Zealand Security Intelligence Service assessments in 2018 


From December 2017, the Strategic Intelligence Analysis team within the New Zealand 
Security Intelligence Service started producing quarterly New Zealand Terrorism Updates. 
Three of these reports were produced before 15 March 2019. They are relatively short and 
focus almost exclusively on the threat of Islamist extremist terrorism in New Zealand and 
overseas. Two of these reports produced in the second half of 2018, and one produced 
in the first quarter of 2019, referred to the threat of extreme right-wing terrorism. The 
New Zealand Terrorism Update dated 5 September 2018 noted that “[the New Zealand 
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Security Intelligence Service] is not aware of any credible indications of terrorist threats 
from supporters of non-Islamist terrorist groups or other extreme ideologies”. The next 
New Zealand Terrorism Update in this series was dated 4 December 2018 and was more 
cautious: 


Non-Islamist terrorist threats from extreme political, religious and issues-motivated 

groups are plausible in New Zealand, especially given heightened political partisanship 
internationally and the spread of disinformation online. Various radical groups are present 
in New Zealand, some of which have extreme elements that could plausibly turn violent; 
however, terrorist acts by them are currently not expected. 


The spread of highly partisan political content online, especially over social media, has 
almost certainly contributed to acts of non-Islamist extremist violence in Western countries. 
Several attempted and realised attacks in the United States in 2018 were linked to extreme 
right-wing, conspiratorial, or racist agitation in social and other media, judging from press 
reporting. 


The final New Zealand Terrorism Update published before 15 March 2019, which was dated 
5 March 2019, stated that: 


[The New Zealand Security Intelligence Service] and [Combined Threat Assessment Group] 
analysts note that extremism exists in the fringes of non-Ilslamist New Zealand political, 
religious, and issues-motivated groups and could plausibly result in violence. However, 
[the New Zealand Security Intelligence Service] is not aware of any credible threats from 
such groups. 


These assessments reflect the New Zealand Security Intelligence Service’s developing 
but still limited understanding of the threat of right-wing extremism in New Zealand as at 
15 March 2019. 


A training exercise 


A counter-terrorism tabletop training Response exercise was carried out by the New Zealand 
Security Intelligence Service and New Zealand Police in October 2018. Two hypothetical 
counter-terrorism scenarios were presented and discussed. One of the scenarios tested 
was an extreme right-wing attack outside a masjid in Christchurch. This scenario assumed 

a Finsbury Park Mosque-style terrorist attack, with a vehicle hitting pedestrians leaving 
what was described in the scenario as the “[an-Nur] Mosque adjacent to Hagley Park in 
Christchurch”. The hypothetical attacker in the scenario shouted anti-immigration and 
IsLamophobic slurs as he fled the scene. 
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The locations of the assumed attack and the first phase of the 15 March 2019 terrorist attack 
are the same. We must emphasise that this is a coincidence, albeit a striking one. The 
design of the exercise was not informed by intelligence suggesting that Masjid an-Nur was at 
risk as there was no such intelligence. 


The objectives for the exercise were focused on increasing the understanding of agencies’ 
processes and procedures during the Response to a terrorism scenario. Importantly, for 
present purposes, what the exercise demonstrated was an awareness of the possibility of 
the threat from the extreme right-wing - and that such an attack could potentially occur in 
New Zealand. 


A system view - looking back 


Andrew Kibblewhite, former Chief Executive of the Department of the Prime Minister and 
Cabinet, told us “we weren’t unaware of a white supremacist threat but it wasn’t where 

our focus was”. He used the metaphor of an iceberg. The system knew about the threat of 
the extreme right-wing but saw it as a “small iceberg”, so there would be the “occasional 
paragraph” about the extreme right-wing in intelligence products. But there was no deeper 
investigation beneath the surface. Andrew Kibblewhite said that it had become apparent 
after the 15 March 2019 terrorist attack, in light of the leads received on possible extreme 
right-wing activities, that the “iceberg was bigger than we realised and it was our job, asa 
system, to know the size of that iceberg”. 


Community concerns 


In the two or three years before 15 March 2019, members of Muslim communities in 

New Zealand raised many issues with Public sector agencies including Islamophobia, 
discrimination and harassment. Minutes tended not to be taken at the meetings at which 
these concerns were raised and, if notes were taken, they were not shared with community 
members. This, along with the effect of the passage of time on the memories of the officials 
involved in the meeting, means that it is hard to be sure as to the extent to which the 
concerns raised at particular meetings extended to the risk of right-wing terrorism. 


Despite these doubts and difficulties, we are confident that concerns relating to the rise 
of the alt-right, right-wing extremist terrorist attacks overseas and the safety of Muslim 
communities were shared with Public sector agencies on some occasions. For example: 


a) The speech notes of a Muslim speaker at a meeting on 23 March 2017, at which a senior 
New Zealand Police representative was present raised concerns about the “alt-right 
(neo-Nazis)” and “fear of an attack”. The notes included a question to Public sector 
agencies about whether they had a strategy in place to deal with these issues. 
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b) Anemail to a government official in August 2017 from Muslim individuals records 
how they had raised concerns with a minister about events overseas, an increase in 
IsLamophobia experienced by Muslim women in New Zealand and the rise of the alt-right 
in New Zealand. 


c) Three separate meetings were held in 2018 between the New Zealand Security 
Intelligence Service and different Muslim individuals. The New Zealand Security 
Intelligence Service’s notes from these meetings show concerns were raised about 
Istamophobia and discrimination experienced by Muslim individuals and communities. 
We were told by the individuals that concerns were also raised by about the alt-right 
and right-wing extremism. Such concerns were recorded in some but not all of the 
New Zealand Security Intelligence Service’s notes from the meetings. For instance, 
an email exchange between Muslim individuals following the November 2018 meeting 
recorded that they had raised concerns about hate groups and an offensive pamphlet 
being placed in the letterbox of a Muslim whanau. The New Zealand Security Intelligence 
Service’s record of the same meeting records that concerns were raised about 
anti-Muslim activity and right-wing extremism and includes a reference to the pamphlet. 


d) Anemail sent to New Zealand Police shortly before the 15 March 2019 terrorist attack 
from a member of the Muslim community about their previous report of an abusive 
phone call, their wider concerns about the rise of Islamophobia in New Zealand and the 
need for New Zealand Police to develop a strategy to counter this before it escalated. 


4.11 Terrorism threat level assessments 


From 2010 to 2018, the New Zealand terrorism threat level set by the Combined Threat 
Assessment Group was mostly at “low” (terrorist attack is assessed as possible but is not 
expected) or “very low” (a terrorist attack is assessed as very unlikely). It set these levels 

on the basis that “New Zealand has not experienced a completed Islamist extremist terrorist 
attack and [the Combined Threat Assessment Group] is not aware of any current and/or 
advanced plan to conduct one”. It emphasised, however, that the low threat level meant that 
the threat of terrorism in New Zealand was real, even at “low”. 


4.12 Concluding comments 


The assessments outlined above generally judged that the terrorism threat to New Zealanders 
was greater offshore and the primary threat was Islamist extremist terrorism. There were few 
strategic intelligence assessments about terrorism threats in New Zealand and hardly any on 
emerging threats such as right-wing extremism. 
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In part this was because the two key assessment agencies were not well-situated to provide 
assessments of emerging terrorism threats in New Zealand. The National Assessments 
Bureau saw terrorism as primarily the responsibility of the Combined Threat Assessment 
Group. Its focus was largely international and customer directed. The Combined Threat 
Assessment Group’s assessments were short-term and tactical in nature rather than 
long-term and strategic. Both agencies had limited resources and neither had a dedicated 
horizon scanning capability. The lack of a coordinated national assessments programme 
meant that the gaps in strategic assessment were less likely to be identified and addressed. 


We see the way these agencies viewed their respective roles, and the focus of their efforts, 
as a function of the way the counter-terrorism effort operated as a whole and thus not within 
the control of a single agency. We address this further in our evaluation in Part 8, chapter 15. 
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Chapter 5: The New Zealand Security 
Intelligence Service 


5.1 Overview 

The New Zealand Security Intelligence Service is New Zealand’s human intelligence agency. 
In this chapter we: 

a) describe what human intelligence brings to the counter-terrorism effort; 

b) discuss the roles of the New Zealand Security Intelligence Service; 

c) explain its leads process; 

d) discuss the rebuild of the New Zealand Security Intelligence Service; and 


e) assess the evolution of their counter-terrorism efforts. 


5.2 What does human intelligence bring to the 
counter-terrorism effort? 


Human intelligence can enrich intelligence obtained from other sources, by providing 
insights into the motivation and intention of individual actors, which may not be apparent 
from signals intelligence alone (see Part 8, chapter 7). Intentions and motivations will vary 
from one person to another and change over time. Understanding people and all their 
complexities is crucial to the collection of human intelligence. 


A human intelligence agency offers the national security system and the counter-terrorism 
effort expertise in making sense of information from multiple sources with a view to 
developing a deeper understanding of the security environment. 


Ideally a human intelligence agency’s all source analysis will generate a strong understanding 
of the threatscape. It is used to identify emerging threats, supports disruption and 
enforcement carried out by law enforcement agencies and informs decision-making 
elsewhere in government (for example, immigration decision-making). 


5.3 Roles of the New Zealand Security Intelligence Service 


The New Zealand Security Intelligence Service is a specialised human intelligence agency.” 
Its objectives include the protection of New Zealand’s national security,”° including protection 
from terrorism and violent extremism.” It operates by obtaining human intelligence from 
people with knowledge of, or access to, information. It also obtains information through 

a range of other collection methods. These include physical surveillance, open-source 
research and activities conducted under intelligence warrants, such as the use of tracking 
devices, telecommunications interception and listening devices. 





7 Intelligence and Security Act 2017, section 7. 
1 Intelligence and Security Act 2017, section 9. 


77 Intelligence and Security Act 2017, section 58. 
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The New Zealand Security Intelligence Service has a broader remit than its comparable 
international partner agencies. For example, in Australia there are separate agencies for 
managing domestic security threats (Australian Security Intelligence Organisation), foreign 
intelligence (Australian Secret Intelligence Service) and vetting (Australian Government 
Security Vetting Agency). All of these activities are undertaken by the New Zealand Security 
Intelligence Service. This broad range of functions impacts on its decision-making, including 
its prioritisation and resourcing decisions. 


5.4 Leads process 


A security intelligence investigation always starts with information, which is assessed for its 
relevance to national security by an investigator. 


What is a lead? 


Lead information can take many forms, such as a name, a phone number or an activity of 
security concern. A lead is formally raised if the information and intelligence is both relevant 
to New Zealand and shows a possible threat to national security (such as terrorism or foreign 
interference). 


Information or intelligence that does not meet these two criteria is not raised as a lead or 
investigated further by the New Zealand Security Intelligence Service. It may, however, be 
referred to another domestic agency (such as New Zealand Police), particularly where the 
information suggests criminal activity is taking place. 


Where does lead information come from? 


Lead information comes from a wide range of sources, including: 
a) other New Zealand Security Intelligence Service investigations or business units; 
b) international partners; 


c) other Public sector agencies (such as New Zealand Police or Immigration New Zealand); 
and 


d) the New Zealand public. 


Lead information received (or generated) by the New Zealand Security Intelligence Service 
that relates to terrorism is dealt with and managed by the New Zealand Security Intelligence 
Service’s Counter-Terrorism Unit. During 2017-2018, the Counter-Terrorism Unit received 
about 150 terrorism-related leads. Most of these leads related to individuals allegedly 
viewing violent terrorist propaganda, supporting or seeking to support the activities of Da’ish 
or attempting to travel from New Zealand to join extremist groups or terrorist entities. 
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Progressing lead information to a lead and then to an investigation 


Lead information is initially dealt with by a leads coordinator, who is responsible for making 
a preliminary assessment. The leads coordinator determines whether the information is 
relevant to New Zealand and shows a possible threat to national security. 


The leads coordinator is responsible for allocating the lead information to an investigating 
officer. The leads coordinator is not formally responsible for progressing the lead information 
once it has been allocated to an investigator. The investigator is responsible for evaluating 
the lead information and recommending whether a formal lead should be opened based 

on whether it presents a current matter of national security concern. This will be approved 
or declined by a counter-terrorism manager. A counter-terrorism manager will maintain 
oversight of the lead process and provide guidance where necessary. 


Investigating officers must capture all leads in what is known as the Leads Workflow 
Tool. This tool provides for the active management of leads, ensuring that decisions are 
documented and that actions taken against each lead are accurately recorded and tracked. 


The Leads Workflow Tool requires investigating officers to assign a priority to the lead. The 
New Zealand Security Intelligence Service prioritises leads according to whether they are 
high, medium or low priority: 


a) High/critical - time sensitive and requires immediate action (for example, involves a 
threat to life). 


b) Medium - time sensitive, has an accountable deadline and must be actioned ina 
timely manner. 


c) Low/routine - not time sensitive and must be worked on when the investigator has 
capacity or cannot be looked at due to limited resources. 


Once a priority is assigned, the lead is actioned in the Leads Workflow Tool by the assigned 
investigator. The investigating officer will identify the intelligence gaps that exist in relation 
to the lead and seek to address those by carrying out various inquiries. These involve 
checking one or more of the sources outlined in the figure below. 
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Figure 44: Information and intelligence that may be checked during a lead assessment 


[7 Open-source material 


Information and intelligence held by the New Zealand Security Intelligence 
Service 


4 Other Public sector agencies (such as the Department of Internal Affairs, the 
Government Communications Security Bureau, Immigration New Zealand and 
New Zealand Police) 


Public sector agency databases that the New Zealand Security Intelligence 
Service has lawful access to 


Telecommunications account information (such as subscriber or customer 
information, call associated data, IP addresses) 


l=) Information held by private companies (such as utility companies) 


(s) Financial information (such as banks and New Zealand Police’s Financial Intelligence 





Unit) 





Information and intelligence held by Five Eyes partners 


Through these enquires the investigating officer seeks to understand more about the 

lead information, such as the nature of the links to national security, the credibility of the 
information and the urgency it presents. Depending on what information comes to light, the 
lead may be progressed to an investigation. 


Although the New Zealand Security Intelligence Service has guidelines for the 
commencement of an investigation, there are no hard and fast rules for deciding if a lead 
should move to a full investigation. Instead, it requires the judgement of the investigator 
(and their manager) to the particular facts relating to the lead. Depending on the nature of 
the lead, some factors (such as the imminence of harm) may outweigh other factors (such as 
the reliability of the lead). Given each lead is unique, a definitive threshold is not applicable. 


20 An investigation may extend to covert collection, which may require an intelligence warrant 
to undertake activities that would otherwise be unlawful. 


21 The principles of proportionality and necessity will be relevant in determining what 
investigative activity to undertake (see Part 8, chapter 14). The principle of proportionality 
requires investigators to consider both the intrusiveness of the proposed action and the 
priority of the lead. Counter-terrorism managers are responsible for overseeing whether 
the proposed actions are necessary and proportionate. 


22 If the investigator’s enquiries resolve national security concerns or cannot usefully 
be pursued, the lead is closed with an explanation of the reasons recorded in the 
Leads Workflow Tool. If the lead has been referred to another Public sector agency, 
such as New Zealand Police, this will be recorded. 


Figure 45: Progressing lead information to a lead and then to an investigation 


Potential lead information 


Information received from public reporting, domestic or 
international partners, other New Zealand Security Intelligence Service 
investigations or units 


Leads coordinator 


No further 
enquires 


Is the information relevant to New Zealand? 
Does the information show a threat to national security? If no 


Investigating officer 
No further 


Further enquires to determine whether the information presents a : 
enquires 


current matter of national security concern If no 


Investigating officer 
a . . . No further 
Requests permission from a counter-terrorism manager to open 


a formal lead If no 


enquires 


Investigating officer 
Opens a formal lead and conducts further enquires to determine whether Lead closed 
an investigation should be opened If the concerns are 


resolved or cannot 
be pursued 





If the information meets the 
threshold for investigation 


Tertarse td Mei Ces-1g 


Opens a formal investigation 
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Post-15 March 2019 developments 


In August and September 2019, the New Zealand Security Intelligence Service conducted 

a review of its leads processes. It decided to adopt the Australian Security Intelligence 
Organisation’s leads triage and assessment framework. This provides a standardised set of 
criteria for the evaluation of information, including security and radicalisation indicators, and 
outlines the process for the assessment and management of leads (see Part 8, chapter 12). 


The framework sets out three stages for assessing a lead: 


a) Evaluation and prioritisation (Stage 1) - incoming lead information is triaged and 
prioritised according to security indicators and urgency. Information gaps are identified 
and inquiries are made to fill the gaps. 


b) Development and assessment (Stage 2) - based on the information gathered, an 
assessment is made and inferences are drawn to determine the requirements for further 
enquiries. 


c) Action (Stage 3) - the lead is either elevated to become a formal investigation or closed. 


At Stage 1, the New Zealand Security Intelligence Service applies the Reasoned Assessment 
Model to assist investigators in evaluating and prioritising incoming lead information. 
Under this model, incoming lead information is evaluated and prioritised by a preliminary 
assessment of: 


a) the threat posed by the lead information - this is measured by the intent (motivation, 
desire and confidence to carry out an attack), capability (knowledge and resources for 
conducting an attack, such as access to, and ability to use, weapons) and imminence of 
the threat; 


b) the relevance to national security; 


c) the plausibility, reliability and credibility of the threat and corroboration of the lead 
information (this includes assessing the source of the lead information, including the 
chain of acquisition and motivation of the source); and 


d) the connection between the lead information and New Zealand. 


To assist staff in prioritising leads, the New Zealand Security Intelligence Service has 
produced a table that sets out various security indicators and the priority associated 

with them. For example, “Skills/Knowledge - Research into basic weapons, firearms and 
ammunition” is identified as a critical indicator of security relevance for assessing whether a 
person has the capability to carry out a terrorist act. The number of security indicators (and 
the priority associated with them) that a lead displays is relevant to its overall prioritisation. 
The New Zealand Security Intelligence Service guidance sets out that where a lead displays 
two or more security indicators, it can be prioritised as medium. 
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5.5 The rebuild of the New Zealand Security Intelligence Service 


The New Zealand Security Intelligence Service’s capability and capacity were severely 
degraded by 2013-2014.” As at 30 June 2014, it had 225 staff. Around 35 to 50 percent of 
these staff were allocated to security vetting and just 4.5 full-time equivalent staff (including 
the manager) worked on terrorism investigations. This was less than one staff member 
working on terrorism investigations per million people in New Zealand. The staff working on 
terrorism investigations were supported by intelligence collection and analytical staff. 


By 2016 there had been an appreciable increase in the Counter-Terrorism Unit’s investigative 
staffing. But a large proportion of this was associated with a dedicated one-off investment by 
the government for a specific and narrow purpose. 


Strategic Capability and Resourcing Review programme 


From July 2016, the New Zealand Security Intelligence Service received increased funding 
associated with implementation of the Strategic Capability and Resourcing Review 

(see Part 8, chapter 2). This allowed significant growth over four years in its capacity and 
capability. The increased funding was approved with the condition that the New Zealand 
Intelligence Community would not seek additional funding until at least February 2019, 
unless there was a major security or global shock. 


The anticipated capability increase was described in this way in a February 2016 Strategic 
Capability and Resourcing Review Cabinet paper: 


The capability increases from a current state where partial monitoring of watch-list 
targets is possible and there is minimal coverage outside Auckland, to a future where 
there is a New Zealand-wide baseline threat picture... . 


Since 2016, the New Zealand Security Intelligence Service has undergone rapid organisational 
growth and organisational and business renewal. It has engaged in the development and 
implementation of a fundamental redesign of its governing legislation (the Intelligence and 
Security Act 2017) and responded to enhanced and more rigorous oversight. 





we Performance Improvement Framework, footnote 42 above. 
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Growing capacity and capability in intelligence and security agencies is not straightforward. 
This was recognised by United Kingdom agencies in their response to questioning by the 
Parliamentary Intelligence and Security Committee inquiry into the 7 July 2005 London 
terrorist attacks. When asked whether agency heads ought to have sought a greater increase 
in funding in the previous year, the Chief of the British Secret Intelligence Service said: 


If you try to bring in more than a certain number of new people every year, you can literally 
bust the system ... you can only tolerate a certain number of inexperienced people dealing 
with sensitive subjects.” 


During the initial phases of the New Zealand Security Intelligence Service rebuilding 
exercise the primary focus was on enabling functions (for example, security vetting and then 
compliance and organisational processes and systems) rather than frontline staff. By 2018, 
a significant number of new investigators and some new collection staff had been brought 
on board and, as of late 2019, numbers had recovered considerably from where they were 
several years ago. A consequence of this sequencing is that the numbers of the current 
investigators and a certain category of collection staff is proportionately low and many have 
limited experience. The 2019 Arotake Review confirmed this view, noting that the majority 
of the investigators had less than one year’s experience at the time of the 15 March 2019 
terrorist attack.®° 


We were told that getting the balance between investigative and collection capabilities 
right is difficult, as a certain category of collection staff are particularly difficult to train and 
develop. While there is no set timeframe, as different people develop at different rates, 
collection staff were generally regarded as apprentices for at least their first year. 


Capacity and capability gaps can have flow-on effects for other parts of the organisation. 
Investigations staff need experience to know how to effectively task collection staff. We 
heard that the limited experience of some investigations staff led to extremely valuable 
collection staff being deployed against lower priority intelligence requirements instead of 
developing more strategic access. The New Zealand Security Intelligence Service has sought 
to address this through the establishment of a Collection Hub, which facilitates interaction 
between investigators and collections staff. The Collection Hub ensures that intelligence 
requirements are refined and prioritised according to urgency and available collections 
resources. 





79 United Kingdom Intelligence and Security Committee Report into the London Terrorist Attacks on 7 July 2005 (presented to 
Parliament May 2006) at page 38. 


8° New Zealand Security Intelligence Service, footnote 57 above. 
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We were also told there was, at particular points over the past two to three years, an 
imbalance between the number of investigators on the one hand and collection resources 
available to respond to the investigators’ intelligence requirements on the other. While the 
New Zealand Security Intelligence Service moved to better manage intelligence collection 
needs through the formation of the Collection Hub, this development took time to start 
working properly. Consequently, the imbalance between investigatory and collection 
resources led to considerable pressure on collection resources, particularly at the point 
that relatively large numbers of new investigators were brought into the investigation teams. 


The New Zealand Intelligence Community’s report back on the Strategic Capability and 
Resourcing Review (which occurred after 15 March 2019) noted that recruitment and turnover 
challenges were continuing to impact the numbers of collection staff able to be deployed. 

It takes time for new staff recruits to be security vetted and cleared before they can be 
brought into the organisation and more time to train them to appropriate levels of skill 

and allow them to develop necessary levels of experience.” 


Developing a Strategic Intelligence Analysis function 


In 2015, the New Zealand Security Intelligence Service initiated a review of the security 
intelligence model used within the New Zealand Intelligence Community.” The review 
primarily focused on the New Zealand Security Intelligence Service. It identified the need for 
a stronger strategic function to support its investigative efforts by proactively identifying and 
analysing future security threats. The Strategic Intelligence Analysis function was established 
in response, despite this not being funded under the Strategic Capability and Resourcing 
Review. At the time, the New Zealand Security Intelligence Service was the only Five Eyes 
intelligence agency without a dedicated strategic intelligence analysis capability. 


The primary purpose of the Strategic Intelligence Analysis team is to provide the 

New Zealand Security Intelligence Service with strategic assessment of security intelligence 
issues (especially espionage and terrorism). The New Zealand Security Intelligence Service 
described its strategic intelligence function in the following terms: 





5" The significant lead in time required to bring a new recruit up to full performance was recognised by the National Commission on 
Terrorist Attacks upon the United States in The 9/11 Commission Report. The Commission noted that it “takes five to seven years 
of training, language study, and experience to bring a recruit up to full performance”. See The 9/11 Commission Report: Final 
Report of the National Commission on Terrorist attacks upon the United States (2004) at page 90. 


52 New Zealand Security Intelligence Service Review of the New Zealand Intelligence Community’s Security Intelligence Operating 
Model (Project Aguero) (2015). 
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... to provide [the New Zealand Security Intelligence Service] with practical understanding 
of security intelligence issues as they are occurring or emerging within New Zealand, in 
order to inform [the New Zealand Security Intelligence Service’s] decision-making. This 
capability enables [the New Zealand Security Intelligence Service] to look more broadly 
than just known threats and current investigative areas, by understanding the evolution of 
threats, and identifying emerging or future threat areas. This understanding is then used 
to guide [the New Zealand Security Intelligence Service’s] investigative and operational 
work, as well as resource allocation. For example, strategic analysis can be used to point 
part of our investigative effort towards new, emerging threats in addition to established 
areas of investigation. 


A Capability Directorate was established in mid-2017,* in part to build on the work 
undertaken in response to the 2014 Performance Improvement Framework review of the 
New Zealand Intelligence Community. Its role includes horizon scanning to understand the 
New Zealand Security Intelligence Service’s future capability needs. 


Most of the Strategic Intelligence Analysis team’s work is tasked by investigative teams in the 
New Zealand Security Intelligence Service. It is occasionally tasked by other Public sector 
agencies. A few of its assessments are provided to the wider New Zealand Intelligence 
Community and other stakeholders. For example, its quarterly New Zealand Terrorism 
Updates were distributed to agencies represented on the Security and Intelligence Board, but 
it is unclear to what extent, if any, they guided the counter-terrorism efforts of those agencies. 


In February 2019, an internal memorandum within the New Zealand Security Intelligence 
Service noted “enduring misconceptions of [the Strategic Intelligence Analysis team’s] role 
and purpose”. And the 2019 Arotake Review considered that the Strategic Intelligence 
Analysis team remained “a fledgling capability, whose role in guiding [the New Zealand 
Security Intelligence Service’s] intelligence functions does not yet appear to be fully 
embedded”.* 


With its focus on guiding the operational activity of the New Zealand Security Intelligence 
Service, the Strategic Intelligence Analysis team performed a different function to the 
Combined Threat Assessment Group (see Part 8, chapter 4). The Combined Threat 
Assessment Group’s assessments are intended to inform the approach to counter-terrorism 
at a whole-of-system level. 





83 New Zealand Security Intelligence Service Performance Improvement Framework: Follow-up Self Review of the New Zealand 
Security Intelligence Service Te Pa Whakamarumaru (March 2018) at page 8. 


54 New Zealand Security Intelligence Service, footnote 57 above at page 50. 
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Staffing and turnover 


The New Zealand Security Intelligence Service’s annual staff turnover target is eight percent. 
Annual staff turnover was 12.1 percent in 2018-2019, up from 10.3 percent in 2017-2018. 
Rebecca Kitteridge, Director-General of Security, told us that she would like staff turnover 
to be lower than what it currently is. Despite the New Zealand Intelligence Community 
putting in place a Diversity and Inclusion Strategy, retaining ethnically diverse staff has been 
a particular problem for the New Zealand Security Intelligence Service. Ethnically diverse 
staff represented 21.1 percent of turnover for 2018-2019. While the New Zealand Security 
Intelligence Service pointed out that its turnover rate is broadly consistent with the Public 
service as a whole, high turnover is problematic for an intelligence and security agency. 


Capacity issues continue to be felt deeply in some areas. The 2019 Arotake Review singled 
out staffing levels in the New Zealand Security Intelligence Service’s Christchurch office as a 
problem and requiring consideration.® 


5.6 How has the New Zealand Security Intelligence Service 
pursued its counter-terrorism efforts? 


Operational priorities 


The New Zealand Security Intelligence Service’s 10-Year Operational Strategy, released in 
June 2016, has been a key mechanism for it to apply the National Security and Intelligence 
Priorities (see Part 8, chapter 3). It sets out nine long-term strategic goals. The top three 
goals inform its prioritisation and resourcing decisions:* 


Goal 1: mitigation of espionage and hostile foreign intelligence threats; 
Goal 2: mitigation of serious domestic terrorism threats; and 


Goal 3: establishment of an effective baseline picture of emerging terrorism threats. 


Accordingly, counter-terrorism efforts, while high on the list of goals, sat behind efforts 

to counter espionage and hostile foreign intelligence. In practical terms, this meant that 
before 15 March 2019 approximately half of the New Zealand Security Intelligence Service’s 
investigative resources were dedicated to espionage and hostile foreign intelligence with 
slightly less being allocated to counter-terrorism.®” The higher priority placed on espionage 
and hostile foreign interference meant that more experienced investigators tended to be 
concentrated on those threats.* 





85 New Zealand Security Intelligence Service, footnote 57 above at page 61. 
86 New Zealand Security Intelligence Service, footnote 55 above. 


87 New Zealand Security Intelligence Service, footnote 57 above at page 46. This contrasts with other comparable organisations 
- for example, 81 percent of MI5’s resources are used to support counter-terrorism work. See Security Intelligence Service, 
International Terrorism: the International Terrorism Threat to the UK (Undated) https://www.mi5.gov.uk/international-terrorism. 


88 New Zealand Security Intelligence Service, footnote 57 above at page 57. 
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New Zealand Security Intelligence Service staff told us about the complexity of managing 
competing priorities. This is particularly marked in relation to counter-espionage 

and counter-terrorism operations. The former tend to move at a slower pace than a 
counter-terrorism operation and often require a longer period of operational activity in 
order to bring results. 


Evolving focus of effort 


Up until 2018, the resources available to the New Zealand Security Intelligence Service’s 
counter-terrorism effort were devoted to what was seen as the presenting threat 

(as identified by lead information, intelligence collection, strategic assessments and 
international partner reporting) of Islamist extremist terrorism. These resources were 
almost fully engaged on the investigation of New Zealand supporters of Da’ish seeking 
to participate in hostilities abroad to mount, or encourage or support terrorist attacks 
or undertake activities in support of terrorism in New Zealand. ® 


Before mid-2018 the New Zealand Security Intelligence Service was largely focused 
on monitoring known individuals where the nature of the threat was understood.°° 
Rebecca Kitteridge, Director-General of Security, told us that this was unsatisfactory, 
as it tied up resources that should be actively seeking out unknown threats. 


The 2019 Arotake Review noted that the New Zealand Security Intelligence Service had long 
employed a “classical model” for its investigations, which is lead-based. This model is well 
suited to assessing known threats using established intelligence collection techniques but is 
less well suited to the development of a detailed picture of emerging threats in the security 
environment (see Part 8, chapter 10).°" The 2019 Arotake Review found that the classical 
model had served the New Zealand Security Intelligence Service well in relation to Islamist 
extremist threats. These threats largely (but not exclusively) dominated the New Zealand 
terrorism threatscape until early 2018. 


In 2016 the New Zealand Security Intelligence Service’s 10-Year Operational Strategy 
identified establishing “an effective baseline picture of emerging terrorist threats” as a third 
goal. But this was deferred until there was sufficient capacity to carry out this work, which 
did not occur until May 2018. At that time, the Counter-Terrorism Unit instituted a new work 
programme, which required investigators to allocate 20 percent of their time to baselining 
and target discovery (see Part 8, chapter 10). 





59 New Zealand Security Intelligence Service, footnote 57 above at page 46. 
°° New Zealand Security Intelligence Service, footnote 57 above at page 51. 


*" New Zealand Security Intelligence Service, footnote 57 above at page 10. 


480 


The baselining project looked at emerging threats motivated by a range of ideologies. 

This included a 12 month project focusing on right-wing extremist activity in New Zealand. 

In July 2018, the right-wing extremism project produced a report detailing information and 
intelligence requirements for collection units to pursue. The report also described the 
“Current Intelligence Picture”, which indicates that the New Zealand Security Intelligence 
Service had a limited understanding of the right-wing extremism environment in New Zealand 
at that time: 


At present, little is known about the extreme right-wing environment in New Zealand. 


The New Zealand Security Intelligence Service is currently unsighted to any individuals or 
groups who espouse an extreme right-wing ideology and promote the use of violence to 
achieve their objectives. 


It is possible that a group or individual in New Zealand could associate with [extreme 
right-wing] groups or individuals offshore. 


In response to the intelligence and information requirements, the New Zealand Security 
Intelligence Service’s online operations team began to look at right-wing forums.% 
Additionally, the New Zealand Security Intelligence Service was engaging with a key partner, 
which had a well-established and active target discovery work programme, in order to further 
develop its capability in this area.® 


The New Zealand Security Intelligence Service’s baselining project on right-wing extremism in 
New Zealand was not complete as at 15 March 2019. This meant it had a developing but still 
limited understanding of the threat of right-wing extremism as at 15 March 2019. 


After 15 March 2019, the Counter-Terrorism Unit within the New Zealand Security Intelligence 
Service established a dedicated target discovery team. This team is in a “developmental 
stage” and has been scoping and re-scoping a number of discovery projects and engaging 
with other agencies who may be able to assist efforts. The Counter-Terrorism Unit’s 
Discovery Strategy was revised in August 2019. Since then, the New Zealand Security 
Intelligence Service’s organisational strategy has identified discovery as its first priority. 





%° New Zealand Security Intelligence Service, footnote 57 above at page 96. 


°3 New Zealand Security Intelligence Service, footnote 57 above at page 91. 


481 


> 
wn 
wn 
© 
wn 
alg 
> 
oa 
ct 
oa 
O 
Oo 
° 
(= 
a 
et 
2 
x 
ct 
@ 
3 
So 
= 
3 
© 
= 
o 
+ 





System awareness of unmitigated risk of right-wing terrorism 


The deferral of the baselining of non-Islamist terrorism threats until the New Zealand 
Security Intelligence Service had sufficient additional capacity - that is until May 2018 - was 
consistent with the 2016 Strategic Capability and Resourcing Review Cabinet paper and the 
2016 10-Year Operational Strategy. It was a considered decision by the New Zealand Security 
Intelligence Service. 


The corollary of the recognition that there were threats that warranted baselining and the 
deferral of the baselining project was that there was a risk that was not being addressed. 
The existence of this risk was not explicitly highlighted with the Security and Intelligence 
Board and the Counter-Terrorism Coordination Committee. We will return to discuss this 
point in more detail in Part 8, chapter 15. 


5.7. Concluding comments 


In the years preceding 15 March 2019, the New Zealand Security Intelligence Service was 
rebuilding, from an extremely low base, its capacity to identify and respond to terrorism 
threats. Growing capacity and capability in an intelligence and security agency takes time 
and comes with particular challenges. So the rebuilding exercise was complex. It has, 
however, been implemented in a considered way and has resulted in an organisation that 
is far more capable than it was in 2016. 


As the 2019 Arotake Review identified, the New Zealand Security Intelligence Service’s 
lead-based investigation model was not well suited to the development of a detailed picture 
of emerging threats. Such resources as were available to the counter-terrorism effort were, 
up until 2018, largely devoted to the presenting threat of Islamist extremist terrorism. 

This focus of effort was also contributed to by the very limited assessments from the 
National Assessments Bureau and the Combined Threat Assessment Group about threats 

of terrorism from other sources (see Part 8, chapter 4). 


The deferral of the baselining project meant that, for the period between mid-2016 when 

the Strategic Capability and Resourcing Review money became available and mid-2018 when 
baselining began, the national security system was carrying a risk - the threat of non-Islamist 
extremism - the nature of which was not understood in any detail. 
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Chapter 6: New Zealand Police 


6.1 Overview 


New Zealand Police are responsible for maintaining public safety and domestic law 
enforcement and have a core role in the counter-terrorism effort. 


In this chapter we: 

a) explain the role of New Zealand Police in the counter-terrorism effort; 

b) describe reviews of counter-terrorism policing and international practice; 
c) assess New Zealand Police’s counter-terrorism activities; 

d) explain what New Zealand Police were doing about right-wing extremism; 


e) discuss what awareness the counter-terrorism system had of New Zealand Police’s 
capacity and capability gaps; 


f) describe the experiences of Muslim communities with New Zealand Police; and 


g) set out developments since 15 March 2019. 


6.2 The role of New Zealand Police in the counter-terrorism 
effort 


As explained in Part 2: Context, New Zealand Police are one of two counter-terrorism 
agencies. New Zealand Police seek to prevent crime and improve public safety, detect and 
bring offenders to account and maintain law and order. Their work also includes searching 
for missing persons, dealing with sudden deaths and identifying lost property. They have 

a visible presence in communities. This provides New Zealand Police with the ability to 
collect and analyse information about risks in and against communities. This is critical to the 
prevention of crime, including terrorist activity. 


New Zealand Police are active in Reduction, Readiness, Response and Recovery activities 
(see Part 2, chapter 4) within the counter-terrorism effort. For example, where an individual 
poses a risk, New Zealand Police may take direct action to prevent or disrupt an attack. This 
can occur through arrest and prosecution, issuing warnings or working with individuals to 
connect them with social support needed to divert them from violent extremism. Where the 
risk is imminent, New Zealand Police lead Response activities. 





°4 R Lambert and T Parsons “Community-Based Counter-Terrorism Policing: Recommendations for Practitioners” (2017) 40 Studies 
in Conflict and Terrorism. 
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6.3 Reviews and international practice 


Our review of the literature and international policing practice confirms that there is no single 
internationally-accepted standard for counter-terrorism policing. There are, however, a 
range of common components evident across similar countries (including Australia and the 
United Kingdom). These are consistent with key conclusions from reviews of New Zealand 
Police’s national intelligence and security systems and counter-terrorism efforts® - that 
counter-terrorism policing requires a specialised, coordinated and integrated approach that 
includes prevention and community engagement. More specifically there are four critical 
components of counter-terrorism policing practice: 


a) Leadership, strategy and direction. 

b) A specialist counter-terrorism function. 
c) Awhole-of-police effort. 

d) An intelligence function. 


The assessment that follows is by reference to these four components. 





°5 New Zealand Police National Security Capability Assessment (March 2011); New Zealand Police National Security and 
Counter-Terrorism Capability Review (September 2015). 
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6.4 Assessment of New Zealand Police’s counter-terrorism 
efforts 


Leadership, strategy and direction 


New Zealand Police’s current organisational structure for its counter-terrorism functions is 
outlined in the graphic below. 


Figure 46: Counter-terrorism functions within New Zealand Police 


Police National Headquarters 


Counter-Terrorism Investigations Intelligence 


National Security Group National Intelligence Centre 


Counter-terrorism Managers and Advisors Security Intelligence and 
Threats Group 


National National National National 
Security Security Security Security 
Investigation Investigation Investigation Investigation 
Team Unit 1 Team Unit 2 Team Unit 3 Team Unit 4 


New Zealand Police Districts (investigations, intelligence, prevention) 





A National Security Strategy, which set out New Zealand Police’s approach to national 
security (including counter-terrorism), expired in 2015 and has not been replaced. 

Those we spoke to within the New Zealand Police National Security Group were able to 
provide us with a clear and well-articulated explanation of their counter-terrorism approach. 
This was a New Zealand-specific model particularly focused on prevention and community 
policing. They attributed the lack of a current strategy document to delays in the finalisation 
of a whole-of-government counter-terrorism strategy with which New Zealand Police’s 
strategy would have to align. New Zealand Police had been strongly advocating for a 
whole-of-government counter-terrorism strategy and for changes to counter-terrorism 
legislation at the Security and Intelligence Board for a considerable period (see Part 8, 
chapters 3 and 13). 


The absence of whole-of-government and New Zealand Police counter-terrorism strategies, 
and a lack of capacity, hampered dissemination of the counter-terrorism policing model 
widely within New Zealand Police. The National Security Group at Police National 
Headquarters, which led this work, had only a few full-time equivalent staff. 
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Specialist counter-terrorism function 


To operate effectively, New Zealand Police need to identify and investigate potential terrorist 
threats. This requires specialist teams, with investigative capability, and access to physical 
and technical surveillance, informant management and forensic accountancy capabilities.°° 


As at 15 March 2019, there was one National Security Investigations Team with four units 
spread across the country. These units were responsible for conducting and/or overseeing 
investigations related to national security threats. Their work included prevention, detection 
and disruption of terrorist threats. 


Those in the National Security Investigations Team were described by New Zealand Police 

as experienced and capable investigators who had sufficient training in counter-terrorism 
investigations. Alongside investigation and prosecution, they also worked with individuals to 
identify what support they required to reduce their risk of engaging in violent extremism. 
They saw this as often more beneficial than waiting for arrest opportunities. This is 
consistent with international best practice, which prioritises early intervention by providing 
at-risk individuals with a range of support services to address their vulnerabilities. 


International experience has also highlighted challenges with early intervention activities, as 
they target people who are seen as being at risk of engaging in criminal behaviour but who 
have not actually engaged in any criminal behaviour. The role of law enforcement agencies in 
early intervention therefore needs to be carefully managed to ensure that these activities are 
perceived by those involved as genuine efforts to safeguard and prevent harm, and not as an 
enforcement tool. New Zealand Police appeared to understand these challenges. 


Through their early intervention work, New Zealand Police provided at-risk people with 

the structure and support needed to move them off the path towards violent extremism. 
They provided individually-designed case management plans or referred people to the 
Young Person’s Intervention Programme. This programme was a multiagency scheme 
designed to divert young people (aged 14-20) from violent extremism, which was supported 
by community groups. New Zealand Police involved in the programme felt that it was a 
useful early intervention tool, but that it was hampered by a lack of funding and limited 
involvement by community groups. 





96 KM Dunn, R Atie, M Kennedy, JA Ali, J O’Reilly and L Rogerson “Can you use community policing for counter-terrorism? Evidence 
from NSW, Australia” (2016) 17 Police Practice and Research at page 196. 
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We were told that, before 15 March 2019, the National Security Investigations Team’s 
workload was “do-able”, but a “stretch”. The workload made it difficult at times to devote 
resources to early intervention and risk Reduction activity. Taking action when specific 
individuals were identified as a presenting threat took precedence. This was particularly 
noticeable in resource-intensive operational phases (such as surveillance), during which 
the National Security Investigations Team had to draw on resources from other parts of 
New Zealand Police. Pressure of work meant that the National Security Investigations Team 
did not have the capacity to develop a formal operating model and there was no leads case 
management system. While their way of operating offered flexibility, such as allowing a focus 
on early intervention, it also meant that processes, such as assessing risk, prioritising leads 
and investigations or closing cases, were inconsistent. 


Recognising these capacity gaps, in 2016, New Zealand Police submitted a budget bid for 
increased counter-terrorism resource. This was the same budget round as the Strategic 
Capability and Resourcing Review funding was approved (see Part 8, chapter 2). 

New Zealand Police’s budget bid was unsuccessful. Additional resource was not approved 
until 2018, when funding for 18 new positions was provided to build counter-terrorism 
investigations capability and enhance the Police National Headquarters counter-terrorism 
function. There was comparatively little focus by the Security and Intelligence Board on 
discussing the resourcing of the overall counter-terrorism effort. This meant there was 
limited discussion of New Zealand Police’s counter-terrorism capacity. And, at asystem 
level, the Public sector agencies involved in the counter-terrorism effort remained unaware 
of New Zealand Police’s resourcing gaps and their consequences. 


Capacity issues were compounded by the lack of planning and preparation offences in 
the Terrorism Suppression Act 2002 (see Part 8, chapter 13). New Zealand Police devoted 
considerable resources to monitoring persons of concern. Some of these people were 
behaving in ways that may have resulted in prosecution for planning and preparation 
offences if such offences were provided for in the Terrorism Suppression Act. 


A whole-of-police effort 


Although counter-terrorism policing will often be driven by specialist units, these units 
need to be able to draw on the wider resources of the national organisation.*” New Zealand 
Police have national reach and connections into a wide range of communities through their 
everyday policing work. The interactions that frontline staff have with communities can 
provide crucial opportunities to identify emerging threats or people at risk of radicalisation 
and what support people need to divert from violent extremism. For this to be effective, 
police outside of specialist units need to have some understanding of indicators of, or 
behaviours that might lead to, violent extremism and of their roles and responsibilities in 
countering terrorism. 





97 Sharon Pickering, Jude McCulloch, David Wright-Neville Counter-Terrorism Policing: Community, Cohesion and Security 
(Springer, New York, 2008). 
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The National Security Group was charged with increasing counter-terrorism knowledge and 
capabilities throughout New Zealand Police so they would “know what to look for and how 
to engage with suspects”. The National Security Investigations Team made efforts to build 
knowledge throughout New Zealand Police, through an online training module on violent 
extremism distributed in 2018, discussions with District leadership on the threatscape 

and implications for New Zealand and specialist training for some District investigators. 
Some of these trainings and presentations included content on right-wing extremism, 
including a Senior Investigation Officer course run in Australia by the Australia New Zealand 
Counter-Terrorism Committee (see Part 8, chapter 17 for more detail on these presentations 
and training). But while these efforts were reportedly well received, the small number of 
staff in the National Security Group meant they struggled to fulfil the role of building 
knowledge throughout New Zealand Police in a comprehensive and systematic way. 


As a result, the Districts were not well integrated into the counter-terrorism effort. Some 
staff in the Districts and other units described the National Security Investigations Team 
as operating in isolation, with limited scope for the Districts to contribute. In the absence 
of a national case management system for managing leads, there was no obvious place 
for District staff to record information of relevance regarding people of national security 
concern. Some District staff thought that this reduced opportunities for frontline staff to 
look out for relevant information and contribute to the counter-terrorism effort. 


A 2015 review of New Zealand Police’s counter-terrorism capability recommended 

that a New Zealand Police national prevention coordinator be hired to ensure that 
counter-terrorism prevention activity would be embedded within District efforts.% 

This coordinator was not in place before 15 March 2019. In the absence of a coordinator, 
there was limited, informal, coordination between the National Security Investigations Team 
and other prevention and community policing resources. 


The National Security Investigations Team’s engagement with community policing resources 
and directly with communities was primarily focused on building relationships with Muslim 
communities. They did this, for example, through relationships with ethnic liaison officers 
(see Part 9, chapter 2) and direct engagement with masajid in some areas. The way the 
National Security Investigations Team went about this is in line with good practice. They 
were not, however, working in a planned and deliberate way with other parts of the 
community policing system to identify non-Islamist extremist threats, such as right-wing 
extremism. 





98 New Zealand Police (2011, 2015), footnote 95 above. 


°9 New Zealand Police (2011, 2015), footnote 95 above. 
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Intelligence function 


New Zealand Police’s intelligence model was developed in 2008. As designed, it consists 
of national-level and District-level functions, which are coordinated under one system. 

The National Intelligence Centre is responsible for collecting and assessing information 

to develop strategic intelligence that informs the Police Executive about emerging risks 

and where they should direct resources. Units within the National Intelligence Centre also 
deliver operational and tactical intelligence, such as the Security and Intelligence Threats 
Group, which is responsible for national security intelligence. Each of the 12 Districts has an 
intelligence team. They are responsible for collecting and assessing information to develop 
all tactical, most operational and some strategic level intelligence on District-level issues 
(for example, current or emerging crime trends) to inform local deployment priorities. 
Strategic intelligence products created at the national level should inform District-level 
intelligence collection and operational priorities. 


As at 15 March 2019, New Zealand Police’s intelligence function was not working optimally. 
High staff turnover led to a loss of capacity and capability, variable use of intelligence across 
the Districts and a loss of strategic focus. In December 2018, New Zealand Police launched 
the Transforming Intelligence 2027 strategy in acknowledgement that the capacity and 
capability of their intelligence function had degraded. That strategy put in place a plan to 
renew the intelligence function.'°° 


New Zealand Police’s intelligence function is central to the counter-terrorism policing 
effort, at both the tactical and strategic level. For counter-terrorism, tactical intelligence 
can involve gathering information to identify and build profiles of individuals or groups 

of concern, which are then used by investigators. Strategic intelligence is used to build 

a picture of current and emerging issues and therefore guides organisational priorities. 
Strategic intelligence is important in building a picture of the local counter-terrorism 
environment. The Financial Intelligence Unit also contributes intelligence to New Zealand 
Police’s counter-terrorism effort. 


New Zealand Police’s strategic intelligence reporting could have provided a useful 
contribution to the national security system’s understanding of the domestic threatscape. 
Before 2015, New Zealand Police had been producing strategic intelligence reports on a wide 
range of domestic threats. We have discussed the most relevant of these in Part 8, chapter 4 
above. 





°The Transforming Intelligence 2021 programme includes 11 streams of work: Intelligence Operating Model, National Security, 
Target Development Centre, Open Source, Child Protection Offender Register, Critical Command Information, Collections, 
Intelligence Systems, Performance, Training and Intelligence Support to major events. 
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New Zealand Police’s strategic intelligence capability declined after 2014. There was 
limited strategic focus on counter-terrorism from the intelligence system. We heard that 
the wide remit of the Security and Intelligence Threats Group, combined with its limited 
capacity and competing demands, constrained what that group could realistically do on 
counter-terrorism. The National Intelligence Centre provided briefings to New Zealand 
Police leadership that included strategic level content on terrorism and violent extremism. 
However, the National Intelligence Centre did not produce many strategic products on 
counter-terrorism to inform national and District priorities. This, combined with the lack of 
capacity in District-level collections activity, meant that collection staff were not collecting 
information that would help to build a picture of the domestic extremist environment. 


The New Zealand Police intelligence function also provides important tactical support to 
counter-terrorism efforts. The Security and Intelligence Threats Group runs daily scans 
across New Zealand Police information holdings for issues of national security concern 

and compiles assessments on individuals of concern. Their effectiveness relies on the 
quality of information being recorded in the databases. There were barriers to intelligence 
analysts accessing all of the information they needed, as New Zealand Police information 

is kept across multiple databases. Intelligence analysts in the National Intelligence Centre 
only recently gained access to the database that holds the National Security Investigations 
Team’s case profiles. Information being held in many places makes it harder to create a full 
intelligence picture. 


The National Security Investigations Team’s North Island-based units each had their own 
embedded intelligence analyst. A decision to move the South Island national security 
intelligence analyst resources into the general pool of intelligence analysts was revisited 
after 15 March 2019. It was agreed that those resources could be based within the 
South Island unit if desired. 


We heard that, before 15 March 2019, effort at the District level was directed to 
counter-terrorism (for example, scanning the local environment to generate leads) only 
where District leadership had an interest in it. District intelligence staff had not received 
specialist training on violent extremism indicators, meaning that their ability to undertake 
risk assessments and contribute to counter-terrorism efforts would have been limited. 


490 


30 


31 


3 


Ww 
Ww 


2 


6.5 What were New Zealand Police doing about 
right-wing extremism? 


Intelligence assessments 


In Part 8, chapter 4, we described how New Zealand Police produced intelligence reports 
on several right-wing extremist groups in New Zealand up until 2015. We observed that 
New Zealand Police had generally viewed right-wing extremism as more of a public order 
issue than a potential terrorist threat. 


In 2014, New Zealand Police produced two intelligence assessments published by the 
National Assessments Committee of particular relevance to the extreme right-wing threat 
in New Zealand. These were the last formal assessments of extreme right-wing groups in 
New Zealand for national security purposes. This was before there was a global eruption of 
hateful content online in 2015 and 2016 (see Part 8, chapter 2). At this time the nature 

of right-wing extremism was changing. International developments demonstrated that 
traditional street-based organisations were being supplemented by new groupings and that 
the indicators of allegiance to new right-wing extremist groups were different to those of 
the past. 


From 2015 until 15 March 2019, New Zealand Police were not producing strategic intelligence 
on far right individuals and groups. They were aware of new far right groupings, but they had 
not assessed the groups systematically or produced a national intelligence assessment of the 
contemporary far right environment. We have also seen some evidence that New Zealand 
Police had given some thought to the possibility that Muslim communities in New Zealand 
could be the target of threats, such as the 2018 National Security Situation Update identifying 
periods in which Muslim individuals and communities were potentially at heightened risk of 
attack, such as Ramadan. 


New Zealand Police undertook preliminary steps to produce a national assessment of the 
right-wing extremism environment subsequent to a meeting with the New Zealand Security 
Intelligence Service in late 2018 but limited progress had been made by 15 March 2019. 

As a result, New Zealand Police were not in a position to update their understanding of the 
indicators of right-wing extremism and disseminate this information to the front line. 
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Leads on right-wing extremists 


The National Security Investigations Team receives leads through a variety of channels, 
including from their own activities and from public reporting, frontline reporting and other 
agencies (for example, the New Zealand Security Intelligence Service). They described 
themselves as “threat agnostic” - meaning that when they receive a lead, they use the same 
assessment criteria regardless of the ideological source of the threat. In assessing the risk of 
an individual or group they look for indicators of an intention to use violence in support of an 
extremist ideology and the capability (the skills, knowledge and resources) to do so. There 
are a range of indicators that can be used to assess a person’s radicalisation and mobilisation 
to violence, such as having accessed extremist websites, made statements inciting the use of 
violence, purchased weapons or conducted online research into targets. 


The majority of the National Security Investigations Team’s resources were devoted to 
Islamist extremism. The reason they provided for this focus of effort was that the majority of 
the leads they received were related to possible Islamist extremism. There were aspects of 
the ways New Zealand Police generated leads - for example, the nature of their engagement 
with Muslim communities - that were conducive to generating Islamist extremist leads. 

New Zealand Police were successful in mitigating the threats they identified. For example, 
between August 2015 and January 2018, New Zealand Police arrested 17 individuals of 
national security interest for a variety of offences and issued 40-50 warnings for 
extremism-related objectionable publication offences. 


We were also provided examples from the National Security Investigations Team of leads 
related to right-wing extremism that met the risk threshold and were pursued. 


The National Security Investigations Team acknowledged to us that they did not consistently 
use standardised criteria for assessing leads. Staff made decisions about whether to 
continue assessing an individual based on professional judgement. It is expected that 
individuals would use their knowledge and experience to inform their decision-making. 
However, neither the assessment criteria nor individuals’ professional judgement were 
informed by detailed updated indicators of right-wing extremism after 2015-2016. 
Inconsistent use of assessment criteria can create risks that decisions are influenced 

by unconscious bias. This risk would have been greater given that New Zealand Police 

had limited knowledge and understanding of recent strands of right-wing extremism and 
therefore less experience assessing individuals associated with these ideologies. 


We saw examples of frontline or other staff (such as ethnic, Pacific or iwi liaison officers) 
alerting the National Security Investigations Team to possible cases of right-wing extremism. 
However, to be assured that New Zealand Police were treating all reports of potential 
right-wing extremism seriously we would need to see that all staff could recognise indicators 
of right-wing extremism. We did not receive assurances that there was sufficient awareness 
and training on right-wing extremism for this to be the case. 
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6.6 System awareness of New Zealand Police capacity and 
capability gaps 


The gaps in New Zealand Police’s counter-terrorism efforts - the limited capacity of their 
investigations team, the degraded nature of their intelligence function and the fact that 
they were no longer producing assessments on the extreme right-wing and strategic 
assessments on domestic extremism - were not explicitly highlighted with the Security and 
Intelligence Board and Counter-Terrorism Coordination Committee. 


6.7. Experiences of Muslim communities with New Zealand Police 


Counter-terrorism policing relies on people having trust and confidence in police so that 
they are comfortable reporting threats against themselves and their communities and threats 
within their communities. 


We heard from ethnic liaison officers about their efforts to build meaningful and 
mutually-beneficial relationships with Muslim communities (see Part 9, chapter 2). 
However, being part of the counter-terrorism effort presents challenges for the parts 

of New Zealand Police tasked specifically with community policing, such as ethnic, 
Pacific and iwi liaison officers. For police staff focused on community engagement, being 
involved in counter-terrorism activities can risk compromising community trust because 
they can be seen by communities as using the relationships they build primarily for 
collecting intelligence. 


International experience has shown that to manage these tensions, police need to work in 
partnership with communities. A partnership approach does not exclude the collection of 
community intelligence. But it requires that any intelligence collection occurs alongside 
police prioritising the security concerns that community members bring to them, and 
working collaboratively to increase their safety and security. 


The National Security Investigations Team was aware of the importance of not 

stigmatising and alienating communities. For example, when concerns were raised by 
Muslim communities about people charged for offences under the Films, Videos, and 
Publications Classification Act 1993, the National Security Investigations Team attended 
public forums and developed a brochure explaining that the reason for the charges was 
that downloading objectionable material was a national security indicator. They explained 
that they used a graduated approach where they would only charge people after they had 
first warned the individual. Their intention was early disengagement with charging as a last 
resort. However, we heard that the National Security Investigations Team did not always 
act in ways that were cognisant of the ethnic, Pacific or iwi liaison officers’ need to maintain 
community trust. 
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We heard a range of concerns from Muslim individuals and communities about reports 

they have made to New Zealand Police about suspicious or threatening behaviour (see 

Part 3: What communities told us). In some instances they felt that staff did not have the 
ability to recognise behaviours, signals or patterns of incidents that could signify possible 
hate crimes or signs of extreme right-wing activity. We were told of instances where people 
did not see staff writing anything down when making reports. We heard that people rarely 
received any follow up from New Zealand Police after making reports. This meant that many 
of the Muslim individuals and communities we heard from felt that New Zealand Police did 
not take their concerns seriously. 


At the same time, efforts to engage with Muslim communities have been viewed by 

some as primarily intended to gather intelligence about possible Islamist extremists. 

We have observed that Muslim individuals and communities have often been proactive 

and cooperative with New Zealand Police efforts to identify and mitigate the risk of Islamist 
extremism. However, for many, the perceived overt focus on Islamist extremism without a 
corresponding focus on threats they were reporting created frustration and diminished 
their trust in New Zealand Police. 


A summary of New Zealand Police’s interactions with members of Muslim communities 

since 2010 demonstrates that New Zealand Police looked into many reports of suspicious 

or threatening behaviour made by Muslim individuals or communities. In some cases, 

New Zealand Police spoke to those accused, issued warnings and pursued prosecution. 

In other cases, New Zealand Police staff felt unable to act due to a lack of evidence or 
legislative constraints regarding hate crime (see Part 9, chapter 4). Where New Zealand 
Police had acted, it is not always clear that they reported back to the complainants about the 
outcomes of their inquiries. We heard from community members that where New Zealand 
Police had reported back, this was not always in a way that reassured the complainant that 
the issue had been thoroughly investigated. 


6.8 Developments since 15 March 2019 


Since 15 March 2019, New Zealand Police have been developing a more formalised and 
integrated approach to counter-terrorism. They are now developing an operational model 
that proposes a more graduated response, where low-risk cases are managed by frontline 
staff and high-risk cases stay under the management of the National Security Investigations 
Team. There is a focus on building District capabilities across investigations, intelligence and 
prevention, and building connections between the National Security Investigations Team and 
Districts. New Zealand Police have now implemented the recommendation made in 2015 for 
a dedicated role focused on coordinating prevention work. A national prevention coordinator 
(see above) now leads the newly created Multi-Agency Coordination and Intervention 
Programme, which builds on the Young Person’s Intervention Programme but is for adults. 
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Widespread changes to intelligence capability and capacity are occurring through 
Transforming Intelligence 2021. Changes are also being made to improve intelligence 
support for counter-terrorism, which is now identified as a priority area for New Zealand 
Police intelligence. 


Immediately after 15 March 2019, there was an influx in public reporting of possible national 
security leads, including leads relating to right-wing extremism (see Part 8, chapter 3). A 
National Security Case Management process is being developed to formalise and standardise 
the leads prioritisation process and manage the increase in public reporting. A standardised 
risk assessment tool will be developed and the model will allow the Security and Intelligence 
Threats Group, National Security Investigations Team and District intelligence to manage 
leads through a centralised location and process. New Zealand Police also created a list of 
individuals of right-wing extremist concern. This list was developed by reviewing existing 
New Zealand Police holdings and from new information reported by the public. 


6.9 Concluding comments 


The absence of both a whole of government counter-terrorism strategy (See Part 8, chapter 3) 
and a New Zealand Police counter-terrorism policing strategy limited the ability of staff 
outside specialist units to understand the contribution they could make to preventing and 
countering terrorism. While the specialist units within New Zealand Police showed evidence 
of good practice, especially in their focus on early intervention and prevention, their 

efforts were hampered by their limited capacity. This also limited their ability to build 
counter-terrorism policing capability throughout New Zealand Police and as a result many 
frontline police staff lacked a clear understanding of how to recognise indicators of violent 
extremism. Overall, New Zealand Police lacked adequate specialist counter-terrorism 
capacity and were not using their full policing resource in their efforts to counter violent 
extremism and terrorism. 


Before 2015, New Zealand Police had been paying some attention to right-wing extremism 
in New Zealand by identifying and monitoring the general criminal activities of traditional 
street-based groupings and by managing their potential threat to public order. The risk of 
right-wing extremism was assessed in the two 2014 assessments we have referred to and 
in passing in the 2018 National Security Situation Update. They also opened and pursued 
leads with possible connections to the extreme right-wing. But in the years preceding 

15 March 2019 the focus of New Zealand Police’s counter-terrorism effort was undoubtedly 
on Islamist extremism. 


By 2015, New Zealand Police’s intelligence function had degraded, limiting what it could 
contribute to understanding the domestic terrorism environment. Without an up-to-date 
understanding of right-wing extremism in New Zealand, including the emerging groups and 
networks, New Zealand Police were not well placed to understand the threat and how to 
identify it. 
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As noted above, since the 15 March 2019 terrorist attack, New Zealand Police have created 

a list of individuals of right-wing extremist concern. That this list was developed (in part) by 
New Zealand Police reviewing their existing holdings demonstrates that they had information 
on the extreme right-wing already. New Zealand Police were also able to gather much more 
intelligence on the extreme right-wing after 15 March 2019, as more people had become 
aware of the potential risks to look out for due to heightened public awareness. 


The limited capacity of the New Zealand Police’s national security investigations team 
and the degraded nature of their intelligence function were not brought to the attention 
of the Security and Intelligence Board and Counter-Terrorism Coordination Committee. 
For this reason the residual risk the counter-terrorism effort was carrying was therefore 
not fully understood. 


New Zealand Police understood the importance of community trust and confidence for 
their counter-terrorism activities to be successful and had made efforts in this area. 
However, for many Muslim individuals, the focus on their communities as potential sources 
of terrorist activity and perceived corresponding lack of attention paid to threats against 
them diminished their trust in New Zealand Police. It was evident that New Zealand Police 
had been acting on concerns raised by Muslim individuals and communities but this was 
not always properly communicated. This highlights the important role feedback loops play 
in providing trust and the need for more focus from New Zealand Police on providing this 
reassurance. 
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Chapter 7: The Government Communications 
Security Bureau 


7:1 Overview 


The Government Communications Security Bureau is New Zealand’s signals intelligence 
agency. 


Understanding exactly how signals intelligence works and what skilled practitioners 
can achieve within a particular authorising environment is not straightforward. Of all 
the activities in New Zealand’s counter-terrorism effort, signals intelligence is the least 
understood by those outside of the discipline. 


In this chapter we: 
a) explain what signals intelligence brings to the counter-terrorism effort; 


b) discuss reviews of the Government Communications Security Bureau, and international 
approaches to signals intelligence; and 


c) assess the Government Communications Security Bureau’s contribution to the domestic 
counter-terrorism effort, including its technical capability and capacity, and staffing and 
leadership. 


7.2 What signals intelligence brings to the counter-terrorism 
effort 


Among its other activities, including cyber security, the Government Communications 
Security Bureau conducts signals intelligence. This means it identifies, collects and reports 
on targets’ communications (signals, such as phone calls and emails). It also collects 

and analyses data about communications (metadata). As well, it enables its New Zealand 
customers to access signals intelligence produced by its international partners. 


The value of a signals intelligence agency to a counter-terrorism effort is that it can collect 
information that no other agency can. Its collection techniques can make physical distance 
from a target meaningless. Once access and appropriate authorisation are in place, signals 
intelligence collection is often much faster than other intelligence collection activities. It is 
also usually far less risky than human intelligence operations in terms of the personal safety 
of those involved. 
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7-3 Reviews and international approaches to signals intelligence 


The reputation of the Government Communications Security Bureau was badly affected by 
the Dotcom controversy and the Snowden revelations (see Part 8, chapter 2). The 2013 
review of compliance at the Government Communications Security Bureau found issues 
with compliance that were a consequence of underlying problems in the Government 
Communications Security Bureau’s structure, management, capacity and capability.'"” 


The 2014 Government Communications Security Bureau Functional Review'” noted that 
government, Parliament and the public should expect to have a signals intelligence agency 
that is “highly effective at conducting sophisticated intelligence activities against any 
legitimate targets, no matter how hard”. 


The 2014 Performance and Improvement Framework review highlighted several performance 
challenges for the intelligence and security agencies, including creating a “more seamless 
collaboration to achieve ... products and services that are prized by its key customers”.’® In 
relation to the Government Communications Security Bureau, the review noted the following: 


a) The increasing importance of the internet and “big data” for the Government 
Communications Security Bureau. It stated that “given uncertainty as to future threats, 
[the Government Communications Security Bureau] needs to maintain and develop 
technology and technical skills in areas of plausible future risk, even if these areas are 
not currently a priority”.'4 


b) The importance of maintaining the tradecraft and skills that the Government 
Communications Security Bureau analysts develop through prosecuting dynamic, 
non-institutional counter-terrorism targets and that “the value of signals intelligence in 
safeguarding New Zealand against violent extremism is in identifying previously unknown 
threats through analysis of online behaviours”.’® Its capability to identify threats was 
growing and there was an opportunity to assist the New Zealand Security Intelligence 
Service and New Zealand Police. This was challenging new ground, given the associated 
privacy implications. 


c) The importance of the relationship with the New Zealand Security Intelligence Service. 
It commented that developing a “supportive partnership ... between staff [of both 
agencies] at all levels should be an early priority” and success would come in the form 
of a “close and cooperative working relationship ... with staff in both agencies having 
an improved understanding and appreciation of each other’s contribution to national 
security and enjoying bringing their skills to selected joint projects”.'°° 





"1 Rebecca Kitteridge, footnote 39 above. 

"©? Government Communications Security Bureau Government Communications Security Bureau Functional Review (March 2014). 
1°3 Performance Improvement Framework, footnote 42 above at page 12. 

14 Performance Improvement Framework, footnote 42 above at pages 41-42. 

'°5 Performance Improvement Framework, footnote 42 above at page 48. 


1°6 performance Improvement Framework, footnote 42 above at pages 43-44. 
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The 2014 Performance and Improvement Framework review of the New Zealand Intelligence 
Community also suggested: 


To help Ministers clarify the priorities for national security and the scope of [the 

New Zealand Intelligence Community’s] role and how that applies to the [Government 
Communications Security Bureau], the [Government Communications Security Bureau] 
needs to provide advice on the likely gains, costs and risks of allocating its collection 
resources to different priorities, and to help identify possible trade-offs.'”” 


We observed that, in other countries, human intelligence and signals intelligence agencies 
had deep mutual understanding of each other’s capabilities, characteristics and constraints. 
This was also evident in the relationships between those agencies and police. We heard 

in other countries that co-location of different agencies can minimise these challenges. 
Co-location of agencies is a good first step, but the real value has been agencies working 
together on live operations - not just on Response activities, but also Reduction activities. 
Joint action on Reduction can generate valuable insight into opportunities for the 
counter-terrorism effort. 


In the United States of America, the 9/11 Commission Report commented on joint action, 
saying that the National Security Agency: 


... did not think its job was to research [the identities of potential terrorists]. It saw itself 
as an agency to support intelligence consumers, such as the Central Intelligence Agency. 
The [National Security Agency] tried to respond energetically to any request made. But it 
waited to be asked.'° 


The 9/11 Commission Report argued that cooperation is not the same as joint action: 


When agencies cooperate, one defines the problem and seeks help with it. When they act 
jointly, the problem and options for action are defined differently from the start.'°° 


7.4 Contribution to the domestic counter-terrorism effort 


The Government Communications Security Bureau first established a standing 
counter-terrorism capability in 2003. From 2003 to 2016, it led an effort to close a 
recognised gap in the Five Eyes counter-terrorism effort. This also involved international 
parties outside the Five Eyes partnership. As well, the Government Communications 
Security Bureau provided some support to New Zealand Police and the New Zealand 
Security Intelligence Service. 





'°7 Performance Improvement Framework, footnote 42 above at page 42. 
18 The 9/11 Commission Report, footnote 81 above at page 353. 


'8The 9/11 Commission Report, footnote 81 above at page 400. 
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From 2016, the Government Communications Security Bureau began to change its 
counter-terrorism approach to more closely align its efforts with the revised National 
Intelligence Priorities (see Part 8, chapter 3). It shifted focus to the domestic 
counter-terrorism effort and explicitly became a customer-led organisation. The Government 
Communications Security Bureau considered the New Zealand Security Intelligence Service 
to be the lead agency for domestic counter-terrorism. The New Zealand Security Intelligence 
Service thus became the Government Communications Security Bureau’s primary customer 
for counter-terrorism signals intelligence. All other New Zealand agencies’ counter-terrorism 
tasking occurs through this primary customer. 


From 2016, all of the Government Communications Security Bureau’s counter-terrorism 
activities were the result of specific tasking by another agency. This means the 
Government Communications Security Bureau does not “unilaterally undertake domestic 
counter-terrorism investigations” and does not “self-task or identify its own intelligence 
questions” for any counter-terrorism activity, domestic or international: 


[The Government Communications Security Bureau]’s counter-terrorism mission does not 
have any standing capability to unilaterally detect terrorist or potential terrorist activity 
that has not come to attention by other means. [The Government Communications 

Security Bureau] responds to intelligence requirements or “leads” provided by a domestic 

or international agency, which arise from an already instigated intelligence investigation, 
incidental collection, or through partner reporting. Once a “lead” or subject of investigation 
is established, [the Government Communications Security Bureau] is able to provide 
in-depth analysis including discovery of potentially previously unknown relationships. 


This customer-led model relies on having informed and experienced counter-terrorism 
customers who understand current signals intelligence capabilities and how they might 
be used. 


The New Zealand Security Intelligence Service is still recovering from the significant loss of its 
own capability and experience (see Part 8, chapter 5). The New Zealand Security Intelligence 
Service, possibly correctly, does not regard it as appropriate or necessary for its staff to have 
a full understanding of the Government Communications Security Bureau’s capability. But 
without an understanding of the Government Communications Security Bureau’s capability, 
the New Zealand Security Intelligence Service’s ability to maximise contributions from signals 
intelligence to the counter-terrorism effort is constrained. 


The working relationship between the Government Communications Security Bureau and 
New Zealand Police and the border agencies is not particularly close. Staff in these agencies 
therefore also do not have a good understanding of the capabilities of the Government 
Communications Security Bureau. 
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We acknowledge the Government Communications Security Bureau’s efforts to enhance its 
customer service, as recommended by the 2014 Performance and Improvement Framework 
review. But whether the Government Communications Security Bureau’s customer-led model 
remains the appropriate approach for New Zealand’s domestic counter-terrorism effort has 
not been discussed at a whole-of-system level. 


In 2016, the Government Communications Security Bureau considered its key contributions 
to the counter-terrorism effort included lead generation for target discovery purposes (see 
Part 8, chapter 10), undertaking internet operations and using advanced data collection and 
analysis techniques. It expected to be able to conduct more comprehensive target discovery 
once the Intelligence and Security Act 2017 came into force. It identified international 
coverage and providing technical assistance to the New Zealand Security Intelligence Service 
operations as other contributions it could make. 


In June 2017, the Government Communications Security Bureau established a new line of 
domestic counter-terrorism activity - New Zealand foreign fighters. Any spare capacity 
was to be directed at a joint effort with a Five Eyes partner on non-New Zealand foreign 
fighters, in line with New Zealand’s international counter-terrorism effort (in this case to 
understand the potential problem returning foreign fighters might pose to a particular 
global region). In the same year, the Government Communications Security Bureau advised 
the incoming Minister Responsible for the Government Communications Security Bureau, 
Hon Andrew Little, that it was modernising its counter terrorism capability. It also advised 
that the traditional distinctions between signals intelligence and human intelligence were 
“becoming less important as the complexity of the threatscape ... continues to rise ... [and] 
multidisciplinary responses are required to keep pace with those who seek to harm 

New Zealand”. This echoed the point made in the 2014 Government Communications 
Security Bureau Functional Review."° 


The Government Communications Security Bureau counter-terrorism activities include a 
24-hour watch service, which can quickly circulate threat intelligence. It also participates in 
international and domestic forums. For a time, the Government Communications Security 
Bureau was a participant in a signals intelligence effort with European partners, the benefits 
of which applied to both the domestic and international aspects of New Zealand’s terrorism 
intelligence priority. 





"© Government Communications Security Bureau, footnote 102 above. 
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In 2018, the Government Communications Security Bureau’s standing warrants and 
authorisations enabled it to conduct activity against individual and organisational targets 
including: 


a) those listed in the United Nations Security Council’s list maintained pursuant to the 
United Nations Security Council Resolution 1988, the Da’ish and Al Qaeda sanctions 
list, and the list established by the New Zealand Government or listed in the Terrorism 
Suppression Act 2002; 


b) those engaged in terrorist acts or with links to those engaged in terrorist acts; and 


c) extremists and those who advocate for politically or religiously motivated violence. 


7-5 Technical capability and capacity 


Technical capability 


We discuss in Part 8, chapter 2 some of the key changes in communications and the 
threatscape that have impacted on counter-terrorism efforts, including the prevalence of 
end-to-end encryption. Signals intelligence agencies around the world have responded 
to the latest shifts in the environment in various ways. For example: 


a) They have sought to develop the technical means to exploit modern communications 
even as communications technology changes over time.™ 


b) They are investing in data collection and analysis. Smart analysis of bulk data 
(see Part 8, chapter 10) can reduce large amounts of information to a point where it can 
practicably be analysed by signals intelligence professionals. 


c) They have changed their tradecraft through the development of tools and analytical 
techniques in order to exploit the wide range of communications now available. 


The Government Communications Security Bureau has had to consider how to respond to 
the changing operational environment. The 2014 Government Communications Security 
Bureau Functional Review recommended that it fundamentally shift away from existing 
capabilities and refocus on two emerging areas of internet operations. The need for change 
was “urgent and the change required was revolutionary, not evolutionary if the [@overnment 
Communications Security Bureau] [was] not to be left without significant capabilities”. 





™ Government Communications Security Bureau, footnote 102 above. 


"? Government Communications Security Bureau, footnote 102 above at pages 5 and 10. 
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The Government Communications Security Bureau has found it difficult to make this 
important change quickly. One of the emerging areas of internet operations is of particular 
interest to us. A 2019 Treasury review of that project considered it was “mission critical” 
and noted that the Government Communications Security Bureau was five years behind its 
Five Eyes partners. According to this review, the capability was fundamental to the mission 
of the entire New Zealand Intelligence Community and an important bridge between human 
intelligence and signals intelligence: 


[W]ithout this capability ... the New Zealand intelligence community’s capability to deliver 
intelligence has fallen, which threatens its ability to keep New Zealanders safe. 


Staffing and leadership 


Staff numbers working on domestic counter-terrorism have been limited, because the 
Government Communications Security Bureau dedicates more resources to other National 
Security and Intelligence Priorities (see Part 8, chapter 3). It considers its unique technical 
capabilities are better suited to those other priorities and that counter-terrorism is covered 
by other agencies. 


Approximate intelligence staff numbers (including graduates) dedicated to domestic 
counter-terrorism at the Government Communications Security Bureau™ in recent years were 
two in 2015, four in 2016 (increased by graduates), two in 2017 and seven in 2018. 


Leadership is important to the effectiveness and efficiency of an agency. The Government 
Communications Security Bureau has had seven Directors-General in ten years (six 
Directors-General between 2010 and 2016, when the current Director-General was 
appointed) and significant movement at the second tier. This is substantial change for 

a Public sector agency and has not helped the organisation to recover quickly from the 
Dotcom and Snowden controversies. Nor has it helped to achieve the transformational 
change envisaged in various reviews since 2013, including the Strategic Capability and 
Resourcing Review and the 2018 Performance Improvement Framework follow-up review." 


7-6 Concluding comments 


The Government Communications Security Bureau has the potential to make a key 
contribution to the counter-terrorism effort because it can collect information that no other 
Public sector agency can collect. Yet in the years before 15 March 2019 the role it was playing 
in domestic counter-terrorism was limited. 





"3 This number does not include staff in other areas of the Government Communications Security Bureau whose work may 
contribute in part to its counter-terrorism activity. 


"4 Performance Improvement Framework, footnote 42 above. 
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Past reviews signalled the need for transformational change within the Government 
Communications Security Bureau. This has been difficult to achieve for an organisation 
still dealing with the adverse effects of the Dotcom and Snowden controversies, which 
significantly diminished public confidence in it. The absence of stable leadership between 
2010 and 2016 made it harder for the Government Communications Security Bureau to 
recover from these incidents and make the required transformational change. 


The Government Communications Security Bureau moved to operate as a customer-led 
organisation. This means that it engages in domestic counter-terrorism only when 

tasked by another agency. Its customer focus has limited the ability of the Government 
Communications Security Bureau to undertake joint action with other Public sector agencies 
involved in the domestic counter-terrorism effort. Its customers did not always have 
sufficient understanding of signals intelligence capabilities to know how its contributions 
could be maximised. This may be unnecessarily limiting the ability of the counter-terrorism 
effort to get the most out of signals intelligence. The effects of the customer-led model and 
whether it was the right approach for New Zealand’s counter-terrorism effort have not been 
considered at the whole-of-system level. 


The Government Communications Security Bureau has experienced delays in developing the 
new technical capabilities required to respond to well-understood trends in communications 
and the threatscape. This has not been helped by the small numbers of staff working on 
domestic counter-terrorism. The Government Communications Security Bureau’s unique 
technical capabilities are such that we think it could and should have a more active role in 
the domestic counter-terrorism effort. 
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Chapter 8: The border agencies 


8.1 Overview 


As outlined in Part 6: What Public sector agencies knew about the terrorist, the border 
agencies did not identify the individual as presenting a terrorist threat when he travelled in 
and out of New Zealand. This chapter provides an assessment of the border agencies’ roles 
in the counter-terrorism effort. 


In this chapter, we: 

a) describe the border agencies and their roles in the counter-terrorism effort; 

b) explain how the agencies identify terrorism threats; 

c) discuss the coordination of the border agencies with the counter-terrorism effort; 
d) explain how the border agencies screened for right-wing extremist terrorist threats; 
e) describe the experiences of Muslim travellers at the border; and 


f) discuss developments that have occurred after 15 March 2019. 


8.2 The border agencies 


Immigration New Zealand and New Zealand Customs Service see themselves as “support” 
and “contributor” agencies to New Zealand’s counter-terrorism effort. They both attend 
the Security and Intelligence Board and New Zealand Customs Service also attends the 
Counter-Terrorism Coordination Committee (see Part 8, chapter 3). Both agencies have 
accountabilities in managing border alerts and ensuring New Zealand’s compliance with 
United Nations Security Council resolutions. 


One of Immigration New Zealand’s main functions is to manage the entry of non-New Zealand 
citizens who wish to visit, work, study or live in New Zealand. Immigration officers make 
decisions about who can enter New Zealand according to criteria set out in the Immigration 
Act 2009, Immigration Regulations 2010 and Immigration Instructions (which are certified by 
the Minister of Immigration). 


Immigration New Zealand “does not have a dedicated counter-terrorism function” and sees 
itself as “peripheral to the counter-terrorism system”. Immigration New Zealand told us that 
they contribute to the counter-terrorism effort as part of the multi-agency management and 
risk mitigation of potential terrorist threats with immigration elements. New Zealand’s policy 
is to manage immigration risk offshore wherever possible rather than at the border. 
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New Zealand Customs Service’s main purpose is “protecting New Zealand from risks and 
threats at the border” while advancing New Zealand’s economy. These risks and threats 
cover a wide range, from illegal weapons, objectionable material, illicit drugs and hazardous 
substances, and people, including those of terrorism concern. 


New Zealand Customs Service staff perform limited immigration duties on behalf of 
Immigration New Zealand at passport control."> These duties include checking travel 
documentation, issuing visas and granting entry permission to legitimate travellers. 


New Zealand Customs Service state that counter-terrorism is a “priority one” focus. 
However, other threats such as drugs and revenue evasion present more frequently at 
the border. 


New Zealand Customs Service have a counter-terrorism intelligence team that supports 
frontline officers to respond to potential terrorism threats identified at the border. These 
potential threats also include people leaving New Zealand to participate in terrorism-related 
activities such as seeking to join designated terrorist entities in international conflict zones. 
The counter-terrorism intelligence team sets its work programme based on intelligence it 
creates or receives on new and emerging threats (including intelligence received from the 
Border Five agencies,"* which it assesses for relevance to New Zealand). 


8.3 How border agencies identify terrorism threats 


Immigration New Zealand and New Zealand Customs Service each have their own process for 
identifying terrorism threats. There are four main points where they can identify and act on 
terrorism threats. These are: 


a) during the visa application process; 

b) before passengers depart for New Zealand; 

c) before passengers arrive in New Zealand; and 

d) when passengers arrive at the New Zealand border. 

The process the agencies use to assess risk at each of these points is described below. 


Applying for a visa 


On arrival in New Zealand, Australian citizens are eligible for a resident visa (with 
entitlements to work and study). This eligibility comes from the Trans-Tasman Travel 
Arrangement. They do not need to apply for pre-departure visas. 





"5 Office of the Controller and Auditor-General Report on Border Security: Using information to process passengers (June 2017). 


"6 The Border Five is a trusted partnership that evolved from the Five Eyes intelligence relationship. See Office of the Controller and 
Auditor-General, footnote 115 above. 
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Before 15 March 2019, visitors from the 61 visa waiver countries'” could also apply for 
their visitor visa and entry permission together when they arrived in New Zealand by 
completing an arrival card and presenting it at the border. They also did not have to apply 
for pre-departure visas. 


Travellers from all other countries must apply for their visa and have it approved by 
Immigration New Zealand before departing for New Zealand. 


When assessing visa applications Immigration New Zealand use information they already 
hold on individuals and national security instructions when determining whether an 
individual poses a risk to national security. 


Immigration New Zealand rely on national security instructions to determine if a visa 
applicant requires a National Security Check before their visa application can be processed. 
The national security instructions include a list of countries or territories of possible security 
concern, including those known for extremism. This list is primarily focused on people who 
have connections with African, Asian and Middle Eastern countries. If a National Security 
Check is required, this is carried out by the New Zealand Security Intelligence Service."® 


Before departing for New Zealand 
Passengers are assessed for risk by Immigration New Zealand before boarding a flight. 


Immigration New Zealand receive passenger information through the Advanced Passenger 
Process. This information is sent from the airline as each flight checks in. The data is 
automatically checked to confirm that passengers have the correct visas,”? that the passport 
details do not appear in the International Criminal Police Organization’s (INTERPOL’s) 
database of lost or stolen passports and that no border alerts have been raised about a 
passenger.”° 


Immigration New Zealand also identify risks through its Risk Targeting Programme. 

Flights are assessed as low, medium or high risk. Flights that are considered high risk are 
assigned to an immigration officer for manual screening of every passenger’s information™ 
against immigration risk indicators and Immigration New Zealand’s target advice on 
terrorism. The target advice on terrorism is developed with information provided by other 
Public sector agencies including the New Zealand Security Intelligence Service. The targeting 
rules are mostly built around clusters of individual risk factors that, when present in a single 
travel record, indicate that the person may be a potential security risk. Flights that are 
considered low or medium risk are not assessed. The Risk Targeting Programme continues 
while the flight is travelling to New Zealand. 





"7 Listed in Schedule 2 of the Immigration (Visa, Entry Permission, and Related Matters) Regulations 2010. 

"8 The New Zealand Security Intelligence Service is currently undertaking a review of the National Security Check process for visa 
and other immigration applications. 

"® This does not apply if they are a New Zealand citizen, Australian citizen or are eligible for a visa waiver. 

0 Office of the Controller and Auditor-General, footnote 115 above. 

1 Immigration New Zealand uses the Advanced Passenger Processing data and the Passenger Name Record data. Passenger Name 
Record data is provided by the airline up to 72 hours before the flight’s departure. It contains a range of information, including 
passengers’ biographic data, itinerary, ticket information, contact details and means of payment. Passenger Name Record data 


is held by New Zealand Customs Service but Immigration New Zealand also has access to it. 
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If any risks are identified from Advanced Passenger Processing (for example, if someone is on 
a no fly list) or through the Risk Targeting Programme, Immigration New Zealand will instruct 
the airline not to allow the person to board the plane. Immigration officers may also speak 
to the passenger before making their final decision.’ If the risk is identified too late to allow 
this to happen, an alert will be placed in New Zealand Custom Service’s database and it will 
be addressed when the passenger arrives at the border. If a potential terrorism threat is 
indicated, Immigration New Zealand will also inform the New Zealand Security Intelligence 
Service. 


In 2017, the Auditor-General highlighted the Immigration New Zealand process as 
“inefficient”’* because, in practice, only flights classed as posing a high risk were assessed. 


Before arriving in New Zealand 


New Zealand Customs Service assess passengers for risk before their arrival in New Zealand 
but this generally occurs after the flight has departed. 


New Zealand Customs Service run their automated, rules-based targeting system across 
the Passenger Name Record, passport and flight data.* The counter-terrorism rules-based 
targeting system is built from a terrorism risk profile developed by New Zealand Customs 
Service’s intelligence team to aid in detecting possible border-related offending. The 
terrorism risk profile sets out a list of singular terrorism risks, which when combined into 

a rules-based targeting system can identify people of interest. Examples of individual risk 
factors include previous travel to certain countries or the country of origin. The terrorism 
risk profile is “regularly updated based on shifts in the global terrorism environment and on 
the analysis of risk as it relates to New Zealand”. 


Where there is a rule match, a New Zealand Customs Service officer will manually assess the 
passenger’s potential risk. This can include inquiries into New Zealand Customs Service’s 
own information holdings or other sources. If a potential terrorism threat is indicated, 

the officer will inform Immigration New Zealand and the New Zealand Security Intelligence 
Service and will place an alert in New Zealand Customs Service’s database for actioning at 
the border. 


Immigration New Zealand and New Zealand Customs Service initiated the Collaborative 
Passenger Targeting Trial in January 2019. Risk rules for both agencies were run across all 
international flights arriving into New Zealand to identify passengers meeting specific travel 
profiles. This is discussed more below. 





2 Immigration New Zealand currently receives Advanced Passenger Processing data on individuals travelling to New Zealand and 
individuals leaving New Zealand. 


"3 Office of the Controller and Auditor-General, footnote 115 above. 


"4 Passport and flight information is captured in the Advanced Passenger Information that New Zealand Customs Service are 
provided when the flight departs. 
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Arriving at the border 


Passengers who have been identified by the border agencies as posing a risk through 
their pre-screening processes will have an alert in New Zealand Customs Service’s database. 
Alerts can also be created by other agencies, such as New Zealand Police. 


An alert will provide advice to a New Zealand Customs Service officer who processes the 
person at passport control. This may include instructions as to how the alert should be acted 
on, such as detaining the person for the attendance of New Zealand Police or referring them 
to Immigration New Zealand. 


There are other processes that New Zealand Customs Service use to identify people who 
may pose a risk to national security as they move through the Customs and Immigration 
Controlled areas of the airport. These include the following: 


a) Checking (either manually at passport control or through the eGates) that there is a 
match between the person’s face and their passport photo to avoid impersonation. 


b) Reviewing the passenger’s travel documents and arrival card information for declarations 
made on matters including previous convictions and recent travel history. 


c) Asking the passenger additional questions about their travel plans while in New Zealand 
to ensure the passenger is a legitimate traveller. 


d) X-raying or physically checking luggage to identify any prohibited items, such as 
weapons. If legal thresholds are met, electronic devices such as computers or phones, 
and arriving and departing travellers may be searched for evidence of offending. 


e) Profiling arriving passengers based on their appearance and behaviour. 
f) Using detector dogs to identify any prohibited items. 


A person of interest may be identified, questioned, searched or referred to another agency. 
A record of the interaction, including any outcome, is added to New Zealand Customs 
Service’s intelligence database, which is “used to inform future analysis, risk assessment and 
possible interactions”. 


Immigration New Zealand may also interact with a person at the border. This occurs where 
they have been identified as a risk through Immigration New Zealand’s earlier screening 
processes, through screening arriving passengers based on their appearance and behaviour, 
or because they have been referred to Immigration New Zealand by another agency. 
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Before 15 March 2019, if an Australian or someone from a visa waiver country was not 

a known threat, was not on one of the flights subject to Immigration New Zealand’s 

Risk Targeting programme and did not meet a New Zealand Customs targeting rules, the 
only information available to assess risk was: 


a) near real-time Advanced Passenger Processing and Advanced Passenger Information; 
b) Passenger Name Record data; 


c) what that person declared on their arrival card about their criminal history and whether 
they had been deported, removed or excluded from any country in the past; 


d) what was found through New Zealand Customs Service’s screening process on arrival 
(such as x-rays or detector dogs); 


e) verbal questioning; and 


f) observations of their behaviour on arrival. 


8.4 Goods-related threats 


New Zealand Customs Service receive advanced information on all goods being imported into 
or exported from New Zealand excluding mail items. To manage any trade-related hazards or 
risks, a combination of commodity-based alerts and automated rules-based targeting (that 
looks at broader risk factors than just the description of the goods or tariff item) is used. 


Currently, New Zealand Customs Service do not receive advanced information on the 

30 million mail items (including letters) entering New Zealand each year. Risk assessments 
are carried out using a variety of methods. Suspicious mail items may be detained “pending 
further investigation or seized”. 


For terrorism threats specifically, New Zealand Customs Service have commodity-based 
alerts for precursor ingredients such as “dangerous dual use chemicals”, which can be used 
to create improvised explosive devices. 
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8.5 Coordination of the border agencies with the 
counter-terrorism effort 


New Zealand Customs Service and Immigration New Zealand are both part of the Integrated 
Targeting and Operations Centre. This is “a multi-agency border security operations centre 
in Auckland” established in 2011. It “was designed to bring together multiple agencies 

in one location to better facilitate the targeting and treatment of risks presented to 

New Zealand’s border”.’* The Integrated Targeting and Operations Centre provides a 24 hour 
communications hub and operating centre to support agencies as required.”° The creation 
of the Integrated Targeting and Operations Centre improved coordination and information 
sharing between the agencies.’”” 


Commenting on how the border agencies are strategically situated in the wider national 
security system, a 2016 review noted that: 


Overall [national security] sector governance [has] perhaps ‘left well alone’ the border 
sector ... It had its strategy and knew Government's priorities, its evolutionary systems 
developments were a work-in-progress and its operational performance overall was 
satisfactory.'® 


The review noted that the border agencies should continue to focus on how they can align 
and coordinate their work in order to adapt to possible changes in the threatscape and the 
implications at the border. 


New Zealand Customs Service and Immigration New Zealand are looking for similar national 
security risk indicators. However, as explained above, each agency has its own database 
and risk assessment processes. In order to better coordinate their efforts and make use of 
their respective data, the border agencies initiated the Collaborative Passenger Targeting 
Trial in January 2019. By doing this, 100 percent of passengers on all flights were screened. 
The results showed that over the 16 week trial period, 20 percent of passengers identified 
as a risk did not meet the threshold for targeting by a single agency. If the Collaborative 
Passenger Targeting Trial had not been conducted these passengers would not have been 
identified before arriving in New Zealand. Collaborative Passenger Targeting is now applied 
across all flights. 


The risk rules also have the potential to identify a person of interest much earlier than 
manual processing, as the first set of information is received up to 72 hours before the flight 
departs for New Zealand. This allows agencies more time to conduct further checks and act 
on information. 





5 Simon Murdoch Review of the Integrated Targeting and Operations Centre (July 2016). 
126 Simon Murdoch, footnote 125 above. 
"27 Office of the Controller and Auditor-General, footnote 115 above. 


128 Simon Murdoch, footnote 125 above. 
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We observed that the border agencies could be better connected with the counter-terrorism 
effort: 


a) Itis unclear what guidance and support the border agencies receive from other Public 
sector agencies such as the Department of the Prime Minister and Cabinet, New Zealand 
Police and the New Zealand Security Intelligence Service. 


b) Neither the New Zealand Security Intelligence Service nor New Zealand Police currently 
receive information associated with the New Zealand electronic Travel Authority (see 8.8 
Developments since 15 March 2019). Nor do they receive the Passenger Name Record 
data from New Zealand Customs Service. Information sharing is discussed in Part 8, 
chapter 9. 


c) There isno Memorandum of Understanding between New Zealand Customs Service and 
the New Zealand Security Intelligence Service. In September 2019 the Inspector-General 
of Intelligence and Security’s review of the New Zealand Security Intelligence Service’s 
relationships at the border said there would be value in “documenting clearly the basis 
and scope for the sharing of intelligence ... and for collaboration on operations”.’° Both 
agencies are awaiting our report before negotiating a Memorandum of Understanding. 


8.6 Identifying risks of right-wing extremism 


Immigration New Zealand’s advice on who may present a risk for terrorism at the border has 
a strong emphasis on Islamist extremist terrorism indicators. Before 15 March 2019, there 
was no specific targeting rule in place for screening for extreme right-wing terrorism threats 
(such as travel history, age or gender). 


Before 15 March 2019, New Zealand Customs Service’s passenger targeting rules and 
indicators for identifying potential terrorist threats at the border were also primarily 
targeted at identifying Islamist extremist terrorist threats, including those travelling to 

and from countries that are considered “high risk for religious extremism”. New Zealand 
Customs Service maintain that they are neither concerned with nor have any information 

on a traveller’s religious beliefs. Instead they focus their efforts on “where the person may 
have been and what [the] person may have been up to”. We scrutinise this claim later in the 
chapter. 


In 2013, New Zealand Customs Service added one indicator relating to white supremacy and 
right-wing extremism to their counter-terrorism profile to assist frontline staff. This was 
because they had “identified a rising global trend of extreme right-wing attacks” and because 
of extreme right-wing activity in Australia in 2013. We were told they started working with 
domestic and international intelligence and security agencies and border partners to 

“better understand the risk” of right-wing extremism in 2013. We have not been provided 
with evidence to suggest that much progress was made on this. 





9 Office of the Inspector-General of Intelligence and Security Report on a review of the New Zealand Security Intelligence 
Service relationships at the border (6 September 2019). 
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In 2018, New Zealand Customs Service included indicators of right-wing extremism in 
their training material for frontline officers. In December 2018, New Zealand Customs 
Service discussed concerns about right-wing extremism with New Zealand Police and the 
New Zealand Security Intelligence Service. 


New Zealand Customs Service told us that they were detecting extreme right-wing individuals 
but their knowledge of the risk was “not as well developed as for some other threats to the 
New Zealand border”. They told us this was in line with the information available, the priority 
of other threats and was consistent with the practice of other domestic and international 
border and intelligence agencies. 


8.7. Experiences of Muslim individuals at the border 


During our engagement with communities, we heard that there is a strongly held belief 
that there is bias against Muslim individuals at the border. Muslim communities believe 
that Muslim individuals are stopped and questioned more frequently than non-Muslim 
individuals. 


As noted above, New Zealand Customs Service state that they are not concerned with a 
traveller’s religious beliefs and instead focus their efforts on “where the person may have 
been and what [the] person may have been up to”. 


Given the strong focus on the risk of Islamist extremist terrorism and the way that risk 
identification rules operate, particularly on travel originating in the Middle East, Muslim 
individuals are particularly susceptible to being stopped, interviewed and searched at the 
border. This is understandably regarded as a serious issue by many Muslim individuals and 
communities we spoke to. They see it as demonstrating a perception amongst officials that 
Muslim individuals pose particular threats and as being part of a widespread securitisation 
of Muslim communities. 


The religion of someone presenting at the border will often be obvious. Passports from some 
countries explicitly state the passport holder’s religious affiliation. Religious affiliation can 
often be correlated with citizenship of countries that have large religious majorities. Certain 
surnames are often strongly indicative of religious affiliation. As well, the way a person 
dresses may also suggest a connection with a particular faith. 


We acknowledge that the border agencies have put in place some training to enable their 
staff to act in a culturally safe manner and ensure they understand unconscious bias. 
However, the experiences of some community members suggest that there is further work to 
be done to improve staff training in this area. 
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It is also useful for the border agencies to engage with communities to ensure those 
communities understand the role of the agencies and the reasons for certain operational 
practices. We heard of good examples of this involving community forums in Auckland 

in 2018 that were led by the Human Rights Commission and Human Rights Foundation. 
These forums included officials from the Ministry of Business, Innovation and Employment, 
New Zealand Customs Service, New Zealand Police and the New Zealand Security Intelligence 
Service. At these community forums, officials discussed with Muslim communities a range 
of concerns, including searches conducted at the border, seizure of goods, immigration 
issues, objectionable material and surveillance. We heard feedback from community and 
Public sector agency attendees that these forums had been useful. We consider this type 
of engagement is worth repeating nationwide. 


We also heard from international practitioners that gathering and publishing data on 
government interactions broken down by ethnicity (for example, in relation to searches) 
helps to dispel myths and is useful as it provides accurate information for informed 
public debate. 


8.8 Developments since 15 March 2019 


Immigration New Zealand’s target advice was updated after 15 March 2019. It now refers to 
right-wing extremism and includes some relevant indicators of right-wing extremist ideology. 


The New Zealand electronic Travel Authority was introduced on 1 October 2019. Visa waiver 
travellers now need to complete a New Zealand electronic Travel Authority and have it 
granted at least 72 hours before they depart for New Zealand. Travellers applying for a 

New Zealand electronic Travel Authority are currently not required to provide their recent 
travel history as part of the application process. Nor are they required to declare whether 
they have travelled to countries designated as high risk. 


Immigration New Zealand told us that expanding the New Zealand electronic Travel 
Authority to collect additional information useful for risk targeting would pose “practical 
issues” and have “cost implications” and create “significant additional compliance 
burden[s]” for applicants. 


Australians are exempt from New Zealand electronic Travel Authority requirements. 
This limits Immigration New Zealand’s ability to assess Australian citizens’ risk before they 
arrive in New Zealand. 
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8.9 Concluding comments 


Before 15 March 2019, the border agencies’ focus on terrorist threats was primarily directed 
towards identifying Islamist extremism. There was limited focus on right-wing extremism. 
Since 15 March 2019, the border agencies have been updating their risk identification rules to 
incorporate more indicators relevant to right-wing extremism. 


The focus on Islamist extremism and the corresponding way that risk identification rules 
operated meant that Muslim individuals were commonly stopped, interrogated and searched 
at the border. This has reduced trust and confidence in the border agencies. This lack of 
trust signals the need for continued efforts by the border agencies to engage with Muslim 
communities to explain how their processes operate and reassure them of what is being done 
to identify right-wing extremist terrorist risks. 


We do not make recommendations in relation to the border agencies. They make 
contributions to the counter-terrorism effort that are generally efficient and well-calibrated 
to what is realistic within the time constraints associated with prompt border processing of 
people and goods. They have made efforts recently to work more collaboratively to address 
inefficiencies in the system, for example through the Collaborative Passenger Targeting Trial. 


There is, of course, scope for improvement. This includes closer integration of the border 
agencies in the counter-terrorism effort to ensure that the information and expertise they 
hold can be used in cross-agency counter-terrorism efforts. As well, there is work to be 
done to improve the experiences of Muslim individuals at the border. We see both issues 
as able to be addressed within the framework provided by our recommendations on the 
counter-terrorism effort and social cohesion (see Part 10: Recommendations). 
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Chapter 9: Information sharing 


9.1 Overview 


Our Terms of Reference directed us to make recommendations on: 


5(1)(a) whether there is any improvement to information sharing and analysis practices 
by relevant [Public] sector agencies that could have prevented the terrorist attack, or 
could prevent such terrorist attacks in the future, including, but not limited to, the 
timeliness, adequacy, effectiveness and coordination of information disclosure, sharing, 
or matching between [Public] sector agencies. 


Sharing information is well recognised as fundamental to countering terrorism. Developing 
an intelligence picture to prevent a terrorist attack usually requires a combination of multiple 
pieces of information that, individually may be of limited significance, but together, 

show intent and capability. As the 9/11 Commission Report noted, no one component of 

the United States of America’s intelligence community held all the relevant information 
required to “connect the dots”° in a way that would have enabled disruption of the 

11 September 2001 terrorist attacks. But, had the information been better shared, things 
may have ended up differently. 


In this chapter we: 
a) discuss the balance between privacy and interagency information sharing; 


b) describe previous reviews of components of the national security system related to 
information sharing; 


c) describe legislation, policy and leadership as it relates to information sharing; 
d) consider technical and human factors related to information sharing; 
e) explain how highly classified information is dealt with; 


f) assess the distribution of strategic assessments about terrorism threats in New Zealand; 
and 


g) set out developments that have occurred since 15 March 2019. 


Our focus has been primarily on the activities relevant to the counter-terrorism effort. 
Information sharing between New Zealand Police and the New Zealand Security Intelligence 
Service is discussed in Part 8, chapter 12. 





3° The 9/11 Commission Report, footnote 81 above. 
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9.2 The balance between privacy and interagency 
information sharing 


Public sector agencies, including those involved in the counter-terrorism effort, regard 
personal information as a resource to be used. Their ability to access and use such 
information is constrained by the Privacy Act 1993 and, more broadly, by the extent to 
which such access and use is acceptable to the public. 


The Privacy Act provides for substantial privacy protection by establishing information 
principles that regulate the collection, use, storage and disclosure of information about 
individuals and for access by individuals to information that is held about them. These 
principles are broadly consistent with public expectations about the privacy of personal 
information. 


Legislation may provide specifically for official access to, or sharing of, information. We 
provide some examples later in this chapter. 


In this context, there is a need for Public sector agencies to explain to politicians and the 
public what information they need, how they intend to collect it, how widely it will be shared 
and what safeguards will be put in place to prevent that information being shared more 
widely than it needs to be. There is also the reality that the public has a right to be sceptical 
about calls for more intrusion if Public sector agencies have not complied with restrictions or 
have not fully used mechanisms that they have already been granted by legislation. 


9.3 Previous reviews 


Previous reviews of components of the national security system (see Part 8, chapter 2) have 
noted the fundamental importance of information sharing, observed weaknesses in current 
Public sector arrangements and made recommendations to address them. 


In 2003, the Auditor-General observed there were “few formal processes to co-ordinate 
information collection and flows more widely across the various Public sector agencies”.**" 


The 2009 review A National Security and Intelligence Framework for New Zealand noted 
that “information is the currency of the agencies which make up the sector, and it is a 
truism (in fact a ‘no brainer’) that this infrastructure should enable information to be stored, 
accessed, shared and distributed among the right agencies, at the right time, to the right 
people so that the right use can be made of it”. 





"3! Office of the Controller and Auditor-General, footnote 8 above at page 52. 
"8? Michael Wintringham and Jane Jones, footnote 53 above at page 38. 
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In 2016, the Auditor-General also identified that information flows needed to improve 
throughout the national security system." 


Action plans developed to record and address lessons learned from national 
counter-terrorism exercises"* and from counter-terrorism operations have also repeatedly 
identified difficulties with information sharing. For example, issues identified during a 2016 
counter-terrorism operation included some sensitive information being disseminated more 
widely than it should have been and information being shared with international partners 
but not with the appropriate domestic agencies. 


9.4 Legislation, policy and leadership 


Privacy Act 1993 


The information principles under the Privacy Act provide that, generally, personal information 
should only be used and disclosed for the purpose for which it was collected."® There 

are exceptions that allow use and disclosure where necessary for prevention, detection, 
investigation, prosecution and punishment of offences, and to prevent or reduce a serious 
threat to public health or public safety or the life or health of any individual. As well, an 
intelligence and security agency that holds information collected for a particular purpose 
may use it for another purpose if that is necessary to enable the agency to perform any of 

its functions."%° 


The Privacy Act enables, on a case-by-case basis, one Public sector agency to seek 
information held by another. Such requests are assessed against the information principles. 
The Privacy Act also enables Public sector agencies to enter into approved information 
sharing agreements.” For example, 12 government departments have negotiated an 
information sharing agreement to enable them to share information and intelligence to 
reduce gang-related harm to individuals and New Zealand society. We heard that, even with 
this agreement in place, information sharing for those purposes is sometimes a challenge. 
There is no equivalent information sharing agreement for counter-terrorism purposes. 


Agency-specific legislation 


The Customs and Excise Act 2018, the Immigration Act 2009 and the Intelligence and Security 
Act 2017 contain different bespoke information sharing regimes. For example, a direct access 
agreement enables New Zealand Police to directly create, amend and cancel border alerts in 
a New Zealand Customs Service database. 





"33 Office of the Controller and Auditor-General, footnote 52 above. 


"34 Counter-terrorism exercises are run through the national exercise programme. The last national-level counter-terrorism exercise 
before the 15 March 2019 terrorist attack was in 2014. Comprehensive evaluation reports are prepared after each exercise, which 
include lessons identified and corrective action plans to address those. 


"35 Privacy Act 1993 section 6, information privacy principles 10 and 11. 
136 privacy Act 1993, section 6, information privacy principle 10(2). 


"37 Privacy Act 1993, Part 9A. 
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Of the direct access agreements contemplated by the Intelligence and Security Act 

(see Part 8, chapter 14), only some have been put in place. This suggests that establishing 
direct access agreements has not been a high priority for some of the relevant Public sector 
agencies as a collective. Establishing such agreements requires time, effort, cooperation 
and technical capability to enable the access. 


New Zealand Customs Service and Immigration New Zealand said that other Public sector 
agencies were reluctant to share information. They advocate further legislation to 
specifically allow classes of information sharing. Immigration New Zealand observed 
that a legislative process would enable public consideration of where the balance should 
lie between the rights and interests of individuals and the public interest in the effective 
functioning of the national security system. 


National security system leadership and coordination of information sharing 


In the three years up to March 2019, the Security and Intelligence Board’s (Part 8, chapter 3) 
consideration of information sharing was focused primarily on practical matters such as the 
development of highly classified information technology systems. 


The Security and Intelligence Board discussed on a number of occasions the Top Secret 
information technology system that the Government Communications Security Bureau 
provides other Public sector agencies. In 2017, the Security and Intelligence Board noted that 
the Government Communications Security Bureau-led programme was focused on “building 
the technology platform which will support ... new ways for the [Public] sector to operate”. 


In 2016, the Security and Intelligence Board was told that a counter-terrorism operation 
identified that “the system overall appears under-prepared to facilitate effectively the sharing 
of highly sensitive, [compartmented] intelligence to those who need it, when they need it”. 
The Counter-Terrorism Coordination Committee was asked to address this, along with other 
matters identified in a corrective action plan following that operation. The Counter-Terrorism 
Coordination Committee referred operational coordination matters such as this to a working 
group established in 2016 to “address the void” in joining up operationally-focused lines of 
effort. This work was not completed before 15 March 2019. 


New Zealand Customs Service raised with the Security and Intelligence Board barriers to 
information sharing arising through “proposed and current legislative change” in 2016. 

The Department of the Prime Minister and Cabinet was then to provide the Security and 
Intelligence Board with a clear and succinct statement of the problems associated with 
information sharing between Public sector agencies involved in the national security system. 
This did not happen before 15 March 2019. 
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The Ministry of Health raised with the Security and Intelligence Board challenges of sharing 
information about individuals of national security concern with frontline staff in 2018. This 
was addressed by New Zealand Police updating the Ministry of Health on how they had been 
working at the local level with health sector staff. 


The Counter-Terrorism Coordination Committee minutes did not record any discussion 

on information sharing before March 2019. The 2078 risk profile for terrorism (see Part 8, 
chapter 3) does not include information sharing as one of the national security system’s key 
areas of focus. 


9.5 Technical and human factors related to information sharing 


Information is primarily shared between Public sector agencies by email, rather than through 
shared databases. Relying on email to share information means there is a significant human 
factor to whether and what information gets shared. 


Each Public sector agency involved in the counter-terrorism effort has a separate information 
technology system. Once information has gone from one Public sector agency to another, it 
is stored in the receiving agency’s internal data management system (assuming it is saved). 
There is no secure, shared data repository or workspace accessible to multiple Public sector 
agencies. This is a well-recognised issue for New Zealand’s counter-terrorism effort. 


9.6 Dealing with highly classified information 


What makes something highly classified? 


The New Zealand Government Protective Security Requirements provide for different national 
security classifications depending on the level of damage the compromise of that information 
would pose to the national interest. The Protective Security Requirements are insufficiently 
detailed to inform day-to-day agency decisions on how to classify information.'*° 


As a rule of thumb, intelligence collected by the New Zealand Security Intelligence Service 
using human intelligence methods is classified as Secret or above. Most intelligence 
collected by the Government Communications Security Bureau is classified as Secret COMINT 
or above, which requires more stringent handling requirements and potentially limits how 
many people would see it compared to a Secret report. 





+388 Office of the Inspector-General of Intelligence and Security A review of the New Zealand Security Classification System 


(August 2018). 
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Over-classification of information 


We have seen instances of over-classification of information. Our impression from the large 
quantities of information we have handled and our dealings with Public sector agencies is 
that there is a lack of thoughtfulness about when information needs to be highly classified 
and a marked tendency to over-classify information. This tendency was recently noted by 
the Government Inquiry into Operation Burnham."? We can illustrate this with two examples 
relating to our own work. 


First, the New Zealand Security Intelligence Service’s speaking notes for the closed session 
of Parliament’s Intelligence and Security Committee in February 2019 marked the following 
passage as Secret: 


We have seen acts of violence in likeminded countries such as Australia, the United States 
of America, United Kingdom, Canada and Sweden. This includes attacks on groups of 
people and mosques and the use of weapons, explosives and vehicles. These attacks have 
caused deaths and serious injuries. 


The New Zealand Security Intelligence Service acknowledged that this over-classification was 
in error. It also told us that this error “did not inhibit effective sharing of such information 
with domestic partners in other, lowly classified documents”. 


Second, we have also seen information becoming over-classified in misplaced reliance ona 
clause in the Protective Security Requirements, which provides: 


A discrete collection of information may be assessed as requiring a higher protective 
marking where the aggregated information is significantly more valuable, because it reveals 
new and/or more sensitive information or intelligence than would be apparent from the 
individual data sources. Examples could include data collections that support intelligence 
assessments or are designed to show evidence of fraud. 


We received a package of Cabinet papers classified Top Secret New Zealand Eyes Only from 
the Department of the Prime Minister and Cabinet. This reflected the classification of the 
highest classified document in the package. One of the individual papers that was the 
subject of the Top Secret New Zealand Eyes Only classification was publicly available on 
the Department of the Prime Minister and Cabinet’s website. 





"39 Sir Terence Arnold QC and Sir Geoffrey Palmer QC Report of the Government Inquiry into Operation Burnham (17 July 2020) 
at page 381. 


521 


> 
wn 
wn 
© 
wn 
eels 
> 
oa 
ct 
oa 
O 
OQ 
° 
(= 
a 
et 
2 
x 
ct 
© 
3 
So 
= 
3 
© 
=R 
o 
+ 





w 
tr 


36 


A secure physical space 


The requirements for a physical space secure enough to hold highly classified information 
and information technology systems”° are rigorous, which makes them expensive. There 

are secure physical spaces in some military facilities. However, a number of Public sector 
agencies do not have regular access to secure physical spaces in New Zealand outside 
Auckland, Wellington and Christchurch. This means they do not have easy access to a highly 
classified information technology system outside of those centres. This makes it difficult 

to share or work on highly classified information around the country. The development of a 
strategy to improve access was put on the Department of the Prime Minister and Cabinet’s 
work programme in 2016. We were told that limited progress had been made. 


A secure information technology system 


Once a Public sector agency has a secure physical space, it can then make arrangements 

to install and use a highly classified information technology system within it. Public sector 
agencies either have their own highly classified information technology system or pay the 
Government Communications Security Bureau to run one for them. By the New Zealand 
Intelligence Community’s own assessment in 2018, its customers had been “badly served” by 
highly classified information technology and changes to it “have been a long time coming”. 
Work continues on developing the Top Secret computer network. 


National security cleared people 


The people who can see highly classified information are first vetted to ensure that they are 
suitable to access that information. The New Zealand Security Intelligence Service conducts 
this process at the request of other Public sector agencies and the relevant chief executive 
then decides whether to grant the clearance on its advice. That Public sector agency then 
has ongoing obligations relating to its cleared staff to ensure those staff remain suitable to 
hold a national security clearance, such as watching out for any signs that could suggest that 
the person is unreliable or susceptible to pressure. 


The New Zealand Security Intelligence Service has made good progress in recent years 
decreasing the average time taken to grant a national security clearance. That said, there 
will always be a delay between a Public sector agency identifying a person who requires a 
clearance and that person gaining the relevant national security clearance. This needs to 
be carefully managed within and across Public sector agencies. 





“4°These secure physical spaces are referred to as SCIFs (Secure Compartmented Information Facilities) within the national security 
agencies. 


™ New Zealand Intelligence Community NZIC Follow-up Self-review (March 2018). 
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“Need to know” 


Once a person has a relevant national security clearance and access to a secure physical 
space and network, the “need to know” principle applies. This principle means that a person 
should only share classified information with others who hold the right level of national 
security clearance and who need it to do their work. It also means that the risk associated 
with sharing information is borne by the person sharing it. 


We would like to see Public sector agencies who produce classified information thinking hard 
about what “need to know” means for the information they hold and share for the purposes 
of the counter-terrorism effort. Our sense is that Public sector agencies are thinking about it 
in more restrictive terms - as a rationale for not sharing information. But the “need to know” 
principle is consistent with a positive or enabling mindset, which encourages Public sector 
agencies to think of what information they hold that other Public sector agencies might 
benefit from. 


Deciding whether someone else or another Public sector agency “needs to know” information 
requires an appreciation of what that person and Public sector agency 

does in the counter-terrorism effort and how that information might be useful to them. 

This includes not just the counter-terrorism agencies, but also those involved in the wider 
counter-terrorism effort, including, local government who have a role to play. We are not 
confident that this knowledge and perspective is widespread in the relatively insular agencies 
that produce most highly classified information. 


Partner-supplied highly classified information 


Public sector agencies receive highly classified information from international intelligence 
and security agencies, principally those in the Five Eyes partnership. As such, New Zealand’s 
standards for dealing with highly classified information are consistent with those of its 

Five Eyes partners. 


Where there is a sensitivity, the international partner providing the intelligence requires the 
New Zealand Public sector agency receiving it to check before sharing it further. We have 
seen no evidence that this obligation has prevented intelligence relevant to counter-terrorism 
operations from being shared in a timely fashion within New Zealand. 
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Improving access to highly classified information 


One option to make sharing highly classified information easier is to build more secure 
facilities in different parts of New Zealand, put the highly classified network in those spaces 
and clear more people in Public sector agencies to be able to use it. Obviously substantial 
resources would be required to do this. We were told that the New Zealand Security 
Intelligence Service intends to advocate for more Public sector agencies to have facilities 
and information technology systems that can store and send classified intelligence and 
more staff cleared at appropriate levels, especially for New Zealand Police and particularly 
in the South Island. 


We heard that other countries have built greater numbers of secure facilities and cleared 
more people to enable intelligence and security and law enforcement agencies to work 
more closely together. 


2018 Inspector-General of Intelligence and Security report 


In 2018, the Inspector-General of Intelligence and Security undertook a review of the 
New Zealand security classification system to improve security, reduce costs and 
increase transparency. The report A review of the New Zealand Security Classification 
System recommended several areas for improvement.’ We support the following 
recommendations: 


a) Add [classification] principles that: 
i) no information may remain classified indefinitely; and 


ii) if there is any significant doubt about the appropriate level of classification, it is to be 
classified at the lower level. 


b) Revise agency classification guides, ensuring they supplement not repeat primary 
classification guidance, using agency-specific examples. Test revised guides with staff. 


c) Adopt a topic-based approach to systematic declassification of historic classified 
records, supervised by a multi-agency group. Consult the public, experts and 
Archives New Zealand on priorities for review. 


d) Develop a training programme to accompany classification reform. Specify the 
requirements for ongoing training in classification with more particularity. Extend the 
requirement for refresher training beyond the holders of security clearances. Require 
agencies to track their compliance with training requirements. 


e) Task a coordinating agency with consulting agencies on the feasibility of establishing 
basic ongoing measures of classified data stocks and flows. Compile this information 
with agency measures of their classification review activity and their compliance with 
training requirements. Use this information to start building a set of basic indicators of 
classification system function and performance. 





4? Office of the Inspector-General of Intelligence and Security, footnote 138 above. 
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9.7 Dissemination of strategic assessments about terrorism 
threats in New Zealand 


Strategic assessments about terrorism threats in New Zealand are written to be widely shared 
and their volume is such - fewer than ten a year - that there should be no concerns about 
overloading other Public sector agencies with unwanted information. Apart from potential 
complications from classification, there are no legislative, policy or technical reasons of 
which we are aware that might limit their dissemination. How widely they were shared 
provides a rough indication - or a place to start - as to the state of information sharing 
across the counter-terrorism effort. 


Strategic assessments produced by the Combined Threat Assessment Group, the National 
Assessments Bureau, New Zealand Police and the New Zealand Security Intelligence Service 
were distributed to the Public sector agencies on the Security and Intelligence Board with a 
few additions (Part 8, chapter 4). Other than New Zealand Police assessments, these were 
generally classified Secret, hindering their dissemination within Public sector agencies. 
Restricted versions of some reports were produced. These contained less detailed but still 
valuable information. Although they had a lower classification, they were not necessarily 
disseminated more widely. 


Several ministers were routinely provided with the National Assessments Bureau 
assessments, but the New Zealand Security Intelligence Service and the Combined Threat 
Assessment Group assessments on the terrorism threat in New Zealand are not typically 
shared with ministers other than the Minister Responsible for the New Zealand Security 
Intelligence Service. 


Ministers on the Cabinet External Relations and Security Committee received strategic 
assessments in 2012, 2016 and 2018 when approving the National Intelligence Priorities and 
National Security and Intelligence Priorities (Part 8, chapter 3). These included assessments 
about terrorism threats in New Zealand. 


Members of the Intelligence and Security Committee of Parliament are not provided with 
assessments of terrorism threats in New Zealand except as reflected in the annual reports or 
statements of intent of the New Zealand Security Intelligence Service or the oral reports of 
the Director-General of Security. 
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The national security system involves wider groups of Public sector agencies, local 
government and civil society than those on the distribution list for assessment products 

on terrorism threats in New Zealand. Those agencies and groups require information to 

be able to inform their own plans and activity. An example is Civil Defence and Emergency 
Management groups, which are required to identify, assess and manage all relevant hazards 
and risks. The statutory definition of “emergency” is not limited to natural hazards,'4 
which means these groups are required to develop and implement Civil Defence Emergency 
Management plans for the risk from terrorism." Most of these plans assess the threat and 
risk from terrorism. Nothing we saw indicates that these plans were consistently informed 
by the Combined Threat Assessment Group assessments or the terrorism risk profile in the 
National Risk Register (see Part 8, chapter 3). 


9.8 Developments since 15 March 2019 


The dissemination of the Combined Threat Assessment Group New Zealand threat 
assessments remained limited. Shortly after the 15 March 2019 terrorist attack, only some of 
the 36 agencies who should have been briefed on the increased threat level and the actions 
they should take were briefed. This was identified as a problem in a paper considered by the 
Counter-Terrorism Coordination Committee regarding agency responses to a change in the 
national domestic terrorism threat level. 


In June 2019, the Counter-Terrorism Coordination Committee agreed that information 
access and sharing were vital to understanding the threat. It suggested removing legislative 
barriers, leveraging open-source intelligence capability, developing online platforms for 
agencies to collaborate and enhancing information sharing mechanisms between Public 
sector agencies and selected private organisations. We understand from the New Zealand 
Security Intelligence Service, which is leading this work, that its focus is on the acquisition 
and analysis of data to inform discovery efforts (Part 8, chapter 10). 


The December 2019 Combined Threat Assessment Group assessment of the New Zealand 
terrorism threatscape was Classified Restricted and disseminated to a wider group than 
previous assessments. This document shows that assessments can be informed by 
analysts’ access to highly classified information but need not reference it. This provided the 
opportunity for a wider readership, but it could have been usefully disseminated even more 
widely. 





"48 Civil Defence Emergency Management Act 2002, section 17(1)(a). 

™4 Civil Defence Emergency Management Act 2002, section 4. “Emergency” includes a situation that “is the result of any 
happening, whether natural or otherwise, including without limitation, any explosion, earthquake, eruption, tsunami, land 
movement, flood, storm, tornado, cyclone, serious fire, leakage or spillage of any dangerous gas or substance, technological 
failure, infestation, plague, epidemic, failure of or disruption to an emergency service or a lifeline utility, or actual or imminent 
attack or warlike act”. 


"45 Civil Defence Emergency Management Act 2002, section 17(1)(i). 
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9.9 Concluding comments 


In New Zealand’s counter-terrorism effort, sharing of information between Public sector 
agencies is critical to the effectiveness of the system as a whole. This chapter has identified 
several issues in relation to information sharing practices. 


Agencies do not take full advantage of current legislation for information sharing 


Relevant Public sector agencies have not been fully using current legislation to share 
information as systematically and widely as they might. For example, the Intelligence and 
Security Act permits direct access agreements to be established between intelligence and 
security agencies and other specified Public sector agencies, but only some have been 
agreed (see Part 8, chapter 14). Our sense is that Public sector agencies are not prioritising 
this work. 


Altering practices regarding highly classified information 


The more highly classified a document, the fewer people can see it. The main barriers to 
sharing highly classified information relate to human decisions and attitudes. System-wide 
efforts to improve sharing of highly classified information have been inconsistent. The “need 
to know” principle appears to be applied as a rationale for not sharing information rather 
than as an opportunity to think through whose work could be better enabled by access to 

it. Public sector agencies tend to over-classify information. Public sector agencies could 
make more effort to produce information at lower classifications either through ensuring 
documents are correctly classified at the lowest appropriate level or producing different 
versions of the information. 


Sharing strategic assessments - practices need to change 


Strategic assessments about terrorism threats in New Zealand are the culmination of a great 
deal of investment. They should present the most authoritative and complete picture of the 
threatscape possible. Wherever possible, they should be classified at a level that permits 
distribution and enables them to best inform government decisions and activity. 


Information sharing must be considered in a whole-of-system way 


No one Public sector agency holds all of the finished intelligence or information produced 

by all of the Public sector agencies involved in the counter-terrorism effort. This makes it 
harder to connect the dots and increases the risk that something could be missed. To ensure 
that there is improved information sharing among Public sector agencies and other key 
stakeholders, it should be considered in a whole-of-system way. 


While there have been efforts to improve secure information technology, we have not seena 
coordinated effort led by the Department of the Prime Minister and Cabinet and the Security 
and Intelligence Board to focus attention on information sharing and to overcome barriers 
to sharing highly classified information with all the agencies whose work would benefit from 
receiving it. 
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Chapter 10: Target discovery 


10.1 Overview 


The terrorist attack on 15 March 2019 was carried out by an individual whose violent 
intentions were previously unknown to New Zealand’s Public sector agencies 

(see Part 6: What Public sector agencies knew about the terrorist). He was motivated by 
an ideology (right-wing extremism) that had not been the subject of deliberate intelligence 
collection or analysis by the Public sector agencies involved in the counter-terrorism 

effort until mid-2018. So, at the time of the terrorist attack, these agencies had a limited 
understanding of right-wing extremism and the terrorism threat and risk it presented to 
New Zealand 


In this chapter we: 

a) explain what target discovery is; 

b) discuss how strategic intelligence assessments can guide target discovery; 

c) assess the New Zealand Security Intelligence Service’s target discovery efforts; 

d) assess the Government Communications Security Bureau’s target discovery efforts; and 


e) discuss whether the authorising environment enables the intelligence and security 
agencies to undertake target discovery. 


10.2 What is target discovery? 
When we talk about target discovery, we mean both: 


a) identifying previously unknown terrorism threats (people, groups or networks) motivated 
by a well-understood, known ideology; and 


b) identifying previously unknown terrorism threats (people, groups or networks) motivated 
by an unknown ideology - one that is not well understood. This process necessarily 
includes strategic intelligence assessment (including horizon scanning) to identify and 
better understand the new ideology. 


Target discovery is a proactive, exploratory effort to generate and investigate leads. 
Investigation of these leads can help to identify previously unknown, specific subjects of 
interest. This helps to gain a deeper understanding of not only the threat, but also the 
risk. The objective is to enable Reduction and Readiness activities for that threat before 
it crystallises. 


Target discovery may involve analysing data and information already collected and stored by 
Public sector agencies (or international partners). It may also entail sourcing new data and 
information. This could be through intelligence gathering online, collection of large data 
sets or observation of public events. The data collected can then be used to test hypotheses 
about existing or emerging trends. 
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A useful contrast to target discovery is the “classical model” of investigation 

(see Part 8, chapter5). The classical model begins with lead information, which can 

come from a range of domestic or international sources. The classical model “is not well 
configured for discovery of new leads and, where it does, these tend to be within the same 
[ideological] area”. In this sense it is geared towards responding to known threats."4° 


10.3 Strategic intelligence assessments 


Strategic intelligence assessments scan the global terrorism environment for emerging 
threats and assess these for potential impact. International intelligence and security 
agencies use strategic intelligence assessments to guide decisions on where to focus their 
target discovery resources. 


In the years before 15 March 2019, the National Assessments Bureau and the Combined 
Threat Assessment Group produced limited numbers of strategic intelligence assessments 
on the domestic terrorism threatscape (see Part 8, chapter 4). 


10.4 The New Zealand Security Intelligence Service’s target 
discovery efforts 


In July 2018, the Counter-Terrorism Unit produced a Counter-Terrorism Discovery Strategy 
“to establish a baseline picture of emerging terrorism threats to New Zealand ... with the 
objective of understanding the New Zealand baseline picture based on our current holdings, 
the development of information requirements and outreach opportunities”. 


Part of this work was the baselining project on right-wing extremism in New Zealand, which 
we have discussed in Part 8, chapter 5. In the course of this project, the New Zealand 
Security Intelligence Service’s online operations team also began to look at right-wing 
forums.” The project generated ten leads relevant to right-wing extremism, some of which 
remained open at 15 March 2019. 


The 2019 Arotake Review described the Counter-Terrorism Discovery Strategy as “basic but 
sufficient”, noting that it provided a framework for proposing, authorising and recording 
discovery projects.'° 


Since 15 March 2019, the New Zealand Security Intelligence Service has refreshed its 
Counter-Terrorism Discovery Strategy. It has also dedicated specific resources to a 
counter-terrorism discovery team. Staff are seconded into that team from other teams 
on a rotating basis. 





“46 New Zealand Security Intelligence Service, footnote 57 above at page 88. 


"47 New Zealand Security Intelligence Service, footnote 57 above at page 96. 


48 New Zealand Security Intelligence Service, footnote 57 above at page 90. 
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In addition, the New Zealand Security Intelligence Service has established a discovery 
collaboration group that meets monthly. That group includes discovery investigators 

and managers, as well as information exploitation analysts, telecommunications 

experts, strategic analysts and targeting and other relevant officers from within the 

New Zealand Security Intelligence Service. Counter-terrorism analysts from the Government 
Communications Security Bureau regularly participate in the discovery collaboration group, 
and intend to continue to do so. 


10.5 The Government Communications Security Bureau’s target 
discovery efforts 


The Government Communications Security Bureau acts when tasked by the New Zealand 
Security Intelligence Service - its primary customer - and only when given a lead (see Part 8, 
chapter 7). The result of this position has been that, at least since 2016, the organisation has 
carried out limited domestic counter-terrorism target discovery. It has largely been involved 
in collecting intelligence on known terrorism risks motivated by a known ideology rather 
than discovering previously unknown terrorism risks motivated by an unknown ideology. 

The Government Communications Security Bureau’s activities in relation to the domestic 
counter-terrorism effort have been shaped - inevitably - by the focus of the New Zealand 
Security Intelligence Service on known Islamist extremist risks. 


In June 2019 the Government Communications Security Bureau staff participated in a target 
discovery week with the New Zealand Security Intelligence Service to “identify a framework 
to better inform joint discovery projects”. The team proposed the establishment of a shared 
database combining lists of known behaviours and indicators of violent extremism and 
identifiers of those behaviours. The aim was to assist in identifying previously unknown 
terrorism risks motivated by an unknown ideology. 


10.6 Does the authorising environment enable target discovery? 
Target discovery activities that do not require a warrant can include: 

a) collecting publicly available information; 

b) analysis of some internal holdings; 

c) some information requests to domestic or international partner agencies; 

d) observing public events; 

e) engaging with groups of interest; or 


f) directly accessing other agencies’ datasets under agreement. 
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Under section 58 of the Intelligence and Security Act 2017 an intelligence warrant may be 
sought on the basis that it will enable an intelligence and security agency to carry out an 
activity that “identifies, enables the assessment of, or protects against any” of a number of 
harms which include terrorism. This contemplates target discovery. 


There are aspects of target discovery that may be problematic under the Intelligence and 
Security Act as it is likely to: 


a) involve activity directed towards groups of people of whom, individually, comparatively 
few (and perhaps none) will prove to be of national security interest and may involve the 
collection of large amounts of information of which comparatively little (and perhaps 
none) will turn out to be of intelligence value. This means that there may be issues 
whether such activity can be justified as necessary and proportionate; and 


b) include activity directed towards groups of people whose thinking is on the same 
ideological spectrum as those of terrorists but who, at the time the activity commences, 
are not known to have expressed support for violence. Such activity is at risk of being 
seen to contravene section 19 of the Intelligence and Security Act, which provides 
that the exercise of the right to freedom of expression does not justify activity by an 
intelligence and security agency. 


In Part 8, chapter 14 we discuss in more detail how these issues may be addressed under 
the Intelligence and Security Act and do so under the following headings: 


a) Bulk collection and acquisition of data. 
b) Specificity requirements for warrants. 


c) The application of the necessary and proportionate test to actions that do not require 
a warrant. 


d) The relationships between the Inspector-General of Intelligence and Security and the 
intelligence and security agencies. 


e) The possible impact of section 19 of the Intelligence and Security Act in limiting target 
discovery. 


Since 15 March 2019, the agencies are increasingly pursuing intelligence warrants for 

the purposes of target discovery. An example is an application to renew a class-based 
intelligence warrant in October 2019 that picks up on the language of discovery in the 
Intelligence and Security Act (section 58). It would allow the agency to gather intelligence 
about New Zealanders who engage in terrorist acts or with links to those who are, or entities 
whose behaviour indicates they may be of intelligence interest about terrorism or violent 
extremism. The proposed warrant would authorise the agency to conduct various collection 
activities to assess whether those covered by the warrant engage in terrorist acts or 
otherwise have information about threats of terrorism or violent extremism. 
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As we discuss in Part 8, chapter 14 there remain uncertainties as to the extent to which target 
discovery is appropriate under the Intelligence and Security Act. 


10.7 Concluding comments 


Before 15 March 2019, the intelligence and security agencies were engaging in only limited 
target discovery activity. In part, this was due to resource constraints. The New Zealand 
Security Intelligence Service was focused on the presenting threat of Islamist extremist 
terrorism. The classical model of investigation used by the New Zealand Security Intelligence 
Service was better suited to identifying new individuals and groups with Islamist extremist 
ideology than identifying new threats outside that well-understood ideology. 


The New Zealand Security Intelligence Service had identified understanding emerging threats 
as a priority in its 2016 10-Year Operational Strategy. The baselining project on domestic 
right-wing extremism in New Zealand, which began in 2018, generated several new leads. 


After 15 March 2019, the intelligence and security agencies appear to have significantly 
increased their target discovery activity, and dedicated resources to support this work. 
We discuss the legal constraints in Part 8, chapter 14. 
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Chapter 11: Online capacity and capability 


11.1 Overview 


The terrorist attack on 15 March 2019 highlighted the importance of the online capabilities 
and activities of the Public sector agencies with counter-terrorism operational 
responsibilities. 


A significant element of New Zealand’s counter-terrorism effort needs to be online 

because the internet is widely recognised as a key platform for terrorist radicalisation and 
recruitment. Our report shows that it was on the internet that the individual developed, at 
least in part, his extreme right-wing views and, to some extent, shared them. He also used 
the internet to obtain operational guidance, research firearms capability and undertake 
some of his reconnaissance. It was also the internet that enabled him to reach a worldwide 
audience with his GoPro livestream and manifesto (see Part 4: The terrorist). 


This chapter: 

a) describes the two types of online intelligence collection; 

b) explains the challenges that online intelligence collection presents; 
c) outlines developments since 15 March 2019; and 


d) assesses the extent to which there is there is a whole-of-system approach to online 
capabilities in the counter-terrorism effort. 


11.2 Two types of online intelligence collection 
There are two distinct types of online intelligence collection.'° 


First, collection through open-source research and monitoring. This involves searching areas 
on the internet that do not require difficult-to-obtain privileges to gain access. It may involve 
access to platforms by subscription. 


Second, collection through covert operations. These may involve the use of automated 
tools to “scrape” or extract data from websites or the development of an assumed identity 
(in accordance with Part 3 of the Intelligence and Security Act 2017). An assumed identity 
can be used to support an online persona and gain access to closed online forums. 


A key distinction between these two types of online intelligence collection lies in the 
intention of the originator of the information.*° Generally speaking, open-source research 
and monitoring seeks to collect information that the originator was not concerned to keep 
hidden. In contrast, covert operations collect information that the originator did not wish 
to be available to people other than an intended audience, especially not to intelligence and 
security and law enforcement agencies. 





49 Government Communications Security Bureau, footnote 102 above. 


*5° Government Communications Security Bureau, footnote 102 above. 
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More people are spending significant proportions of their lives online, more activities and 
interactions are being conducted online and news and views are being disseminated and 
accessed online. The counter-terrorism effort needs online capabilities. This is particularly 
so because: 


a) the internet enables and facilitates contact between, and funding of, extremists globally; 


b) radicalisation can be driven by both physical world and online influences, and there can 
be significant cross-over between groups and individuals operating in the real world and 
online; 


c) online material can reveal the capabilities that might be utilised by someone mobilising 
to violence; 


d) the volume of extremist material online and the ease with which it can be accessed and 
shared means that extremists are increasingly operating online. Their activities inspire 
and radicalise others with whom they could not otherwise as easily have contact; and 


e) online intelligence collection capability may somewhat offset the collection (and 
consequential intelligence) losses resulting from encryption. 
11.3 The challenges that online intelligence collection presents 


There are several challenges for intelligence and security and law enforcement agencies in 
monitoring and countering extremism online. These include: 


a) the size and complexity of the internet; 

b) encryption; 

c) anonymisation and the use of false names; 

d) the rapid rate of change in the online world; and 

e) the difficulty of identifying the boundary between free speech and harmful extremism. 


The diversity of data is another challenge as data may need to be “cleaned” before it can 

be used. Cleaning is the process of removing or updating data that is incomplete, incorrect, 
improperly formatted, duplicated or irrelevant. There are also challenges in storing, 
managing and interrogating what may be large volumes of data in order to produce usable 
intelligence. 
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Online capabilities stocktake 


Before 15 March 2019 the Public sector agencies involved in the counter-terrorism effort had 
limited online capabilities and capacity for counter-terrorism purposes. 


In mid-2018 the Specialist Coordinator (see Part 8, chapter 3) directed a National 
Assessments Bureau analyst to conduct a stocktake of Public sector agencies’ online activity 
to counter extremism. Initially, the stocktake was intended to support the Counter-Terrorism 
Coordination Committee to consider whether a more detailed gap analysis and consideration 
of potential additional measures was required. 


The stocktake reviewed the Public sector agencies’ activity in relation to online extremist 
activity. It found that while there were a number of relevant work streams underway, there 
was no common approach. The extent to which coordination was occurring was questioned. 
The stocktake was provided to the Counter-Terrorism Coordination Committee. It was asked 
to consider whether: 


a) additional operational or strategic coordination was needed; 
b) there was merit in clarifying the approach to online extremism; and 
c) additional investment was needed. 


The Counter-Terrorism Coordination Committee decided that the Specialist Coordinator and 
the National Assessments Bureau analyst would meet with agencies individually to discuss 
their views directly. We are not aware of any of the matters proposed for consideration 

by the Counter-Terrorism Coordination Committee being progressed further before 

15 March 2019. Nor was the stocktake considered by the Security and Intelligence Board. 


New Zealand Security Intelligence Service 


The New Zealand Security Intelligence Service’s development of covert online capability 
and strengthening of its open-source collection capability were two of six areas for growth 
identified in its 2018 Performance Improvement Framework self-review. This self-review 
followed up on the 2014 Performance Improvement Framework review of the New Zealand 
Intelligence Community." 


The 2019 Arotake Review described these capabilities, as at 15 March 2019, as “fragile”." 
There was one full-time analyst working on open source research and monitoring, with a 
further officer available to bolster capacity when necessary. Security constraints meant that 
other officers had limited suitable internet access, which was described in the review as 
“inadequate to replicate the techniques of the open-source team”. 





'5' New Zealand Security Intelligence Service Performance Improvement Framework: Follow-up Self Review of the New Zealand 
Security Intelligence Service Te Pa Whakamarumaru (March 2018) at page 24; Performance Improvement Framework, 
footnote 42 above. 


"5? New Zealand Security Intelligence Service, footnote 57 above at page 127. 


"53 New Zealand Security Intelligence Service, footnote 57 above at page 62. 
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In early 2018, the covert team consisted of one full-time equivalent made up of two part-time 
officers. Both officers left in mid-2018. While new staff were recruited, they required training 
and on-the-job experience before they could confidently undertake their role as required." 


The 2019 Arotake Review recommended that consideration be given to increasing resources 
to achieve the capacity and capability required to maintain ongoing operations and expand 
into additional thematic areas. It noted that the nature of online operations often requires 
high levels of staff availability (for example, staff may need to be interacting online outside 
of normal working hours), along with judgement and a high level of understanding of the 
digital environment.’ The 2019 Arotake Review concluded that the New Zealand Security 
Intelligence Service lacked capacity to fulfil many of its open-source requirements, but did 
not consider a substantial increase in the open-source team was required. Rather, a better 
solution was for more suitable equipment to be made available to other teams (including 
investigators). This would enable more open-source inquiries to be carried out elsewhere in 
the organisation and free up the specialists to undertake more complex inquiries."° 


The New Zealand Security Intelligence Service now has a similar proportion of resources 
dedicated to online human intelligence activity as its international partners. But a senior 
manager at the New Zealand Security Intelligence Service accepted this had not happened 
early enough. Online capability and capacity were not included in the funding from the 
Strategic Capability and Resourcing Review. To build them has required the diversion of 
resources from elsewhere. 


Government Communications Security Bureau 


The Government Communications Security Bureau also has a relatively small internet 
operations team with open-source capabilities, which it describes as “a small focus area 
but a growing one”. The team uses specialised tools and tradecraft and has been careful 

to ensure their work complements that of the New Zealand Security Intelligence Service. 

It provides technical tradecraft advice to other agencies. For example, it provides technical 
support and advice to the New Zealand Security Intelligence Service’s online operations 
team. Its standing work programme does not include counter-terrorism activities. 


New Zealand Police 


While New Zealand Police undertook open-source, online collection of intelligence, we were 
told by former and current officials that there had been very little in the way of training. 
There were few tools to assist New Zealand Police intelligence analysts to exploit social 
media. They considered that there are significant opportunities to improve New Zealand 
Police’s intelligence collection through these means. 





"54 New Zealand Security Intelligence Service, footnote 57 above at page 63. 
"55 New Zealand Security Intelligence Service, footnote 57 above at page 127. 


*56 New Zealand Security Intelligence Service, footnote 57 above at page 61. 
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Department of Internal Affairs 


The Department of Internal Affairs’ Digital Safety Directorate is the lead agency in combatting 
objectionable material under the Films, Videos, Publications Classification Act. See 

Part 9: Social cohesion and embracing diversity for more on the Department of Internal 
Affairs’ role. 


11.4 Developments since 15 March 2019 


We have seen Public sector agencies moving to increase online capability and capacity since 
15 March 2019. 


We understand that work is underway that will eventually provide adequate and more 
broadly available internet access across the New Zealand Security Intelligence Service. 
Some of the additional funding received in Budget 2019 was allocated to this."” 


The New Zealand Security Intelligence Service told us that its online operations capability 
is growing. The Online Operations team is to recruit some additional people. As noted 
the New Zealand Security Intelligence Service now has a similar proportion of resources 
dedicated to online human intelligence activity as its international partners. 


New Zealand Police have now established a dedicated open-source team. They have 
purchased a specialised tool that enables rapid extraction of information from the internet, 
including the dark web. The tool identifies connections between people, events and 
locations online. There has recently been a secondment of an experienced officer to the 
New Zealand Police to assist with the establishment of its open-source team. 


New Zealand Police are also trying to build capability within the National Security 
Investigation Team to undertake online operations, including by sending investigators to 
training courses run by the Australia New Zealand Counter-Terrorism Committee. They are 
seeking additional funding to build their capability and capacity to respond to national 
security concerns, including their online scanning capability and online operations. 


In October 2019, the Prime Minister, Rt Hon Jacinda Ardern, and the Minister of Internal 
Affairs, Hon Tracey Martin, announced that the Department of Internal Affairs would receive 
an additional $17 million over four years. This funding was in response to the 15 March 2019 
terrorist attack and subsequent developments on the Christchurch Call. The new funding will 
boost the Department of Internal Affairs’ investigative, forensic, intelligence and prevention 
work in relation to violent extremism and terrorist content online. 





'57 New Zealand Security Intelligence Service, footnote 57 above at page 127. 
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On 2 June 2020, Cabinet agreed in principle to New Zealand’s accession to the Council of 
Europe Convention on Cybercrime (the Budapest Convention) and to consult publicly to 
inform a further Cabinet decision. The Convention is the first, and currently only, treaty 
specifically seeking to address internet and computer crime. Accession to the Budapest 
Convention would assist New Zealand to initiate or strengthen relationships with member 
countries by signalling New Zealand’s commitment to multilateral efforts to combat 
cybercrime. By providing a standardised framework for cooperation through aligned 
national cybercrime laws, the Convention facilitates cooperation on criminal investigations 
of cybercrime and wider crimes involving electronic evidence, for example private social 
media communications relating to a crime and stored in the cloud by companies such as 
Facebook."® 


11.5 A whole-of-system perspective 


There are now at least four different Public sector agencies (that is the Department of 
Internal Affairs, the Government Communications Security Bureau, New Zealand Police and 
the New Zealand Security Intelligence Service) undertaking online activities in relation to 
extremist activity online. Each has a different mandate. Different mandates might translate 
to differing objectives at an operational level. For example, Public sector agencies with 

an enforcement function in relation to offensive material online may seek to promptly shut 
down offending online accounts. On the other hand, intelligence and security agencies may 
seek to prolong online engagement with those expressing extremist and violent views in 
order to collect information on their intent and capability. While it is important to recognise 
the different mandates, this should not prevent the coordination of building capability to 
undertake online activities. There is a need to coordinate across these mandates to avoid 
duplication of effort, ensure efficient use of resources and to remain alert to any potential 
conflict of objectives. 


While we have been largely concerned with coordination of capability and capacity building 
across Public sector agencies in this chapter, coordination of operational activity will be 
equally important in the future. 


The recent expansion of capability and capacity to operate online in relation to terrorism 
and violent extremism has occurred without centralised coordination or consideration of the 
issues from a whole-of-system perspective. 





158 Department of the Prime Minister and Cabinet and Ministry of Justice Budapest Convention on Cybercrime: Approval to 
Initiate the First Stage Towards Accession (2020) https://dpmc.govt.nz/sites/default/files/2020-09/SWC-20-SUB-0053- 
budapest-convention-on-cybercrime.pdf. 


538 


w 


ow 


To the extent there is leadership and coordination in this area, it is not being driven by the 
Department of the Prime Minister and Cabinet as lead agency and coordinator of the national 
security system. New Zealand Police and the New Zealand Security Intelligence Service have 
both expressed a desire for agencies to work collaboratively on how extremism is tackled 
online and in the development of shared complementary capabilities. Both have proposed 
models for multi-agency collaboration, including co-location. As well, the Government 
Communications Security Bureau has made efforts to work with other agencies to avoid 
duplication of effort. This is a good example of agencies within a small system working 
together to get the best return for New Zealand from limited resources. 


Greater central oversight and coordination of resourcing and work across the different 
agencies is critical. Any further developments or growth should be supported by policy 
work. This will provide clarity on the roles and objectives of agencies and the legal 
parameters within which they operate. Operational protocols will be required to prevent 
conflicts. 


11.6 Concluding comments 


Our review of the online capabilities in the counter-terrorism effort has shown that the 
significance of online activity has been apparent for some time. Before 15 March 2019, 
limited resource was dedicated to developing adequate online capability across the relevant 
Public sector agencies. This was in part a consequence of the absence of a horizon scanning 
function (see Part 8, chapter 4). 


There are commonalities of effort between New Zealand Police and the New Zealand 
Security Intelligence Service. The Department of Internal Affairs (in relation to objectionable 
material) and the Government Communications Security Bureau have complementary roles 
and capabilities. Coordination of the development of online capability is therefore sensible. 
Such coordination was not evident in relation to new funding approved for the Department 
of Internal Affairs to develop online capability in Budget 2019. 


Since 15 March 2019, there has been little system-wide leadership and cross-agency 
coordination in developing policy and building and harnessing capability. Coordinated 
development and deployment of online capability are critical. When that capability is 
developed, leadership and coordination of operational activity will remain a key issue. 

In addition, it will also be important not only to accede to the Budapest Convention but 
also develop a clear and shared understanding between Public sector agencies of the legal 
and policy settings, and the social licence for online intelligence collection. 
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Chapter 12: Relationship between 
New Zealand Police and the New Zealand 
Security Intelligence Service 


12.1 Overview 


In this chapter we look at the relationship between the counter-terrorism agencies - 

New Zealand Police (see Part 8, chapter 6) and the New Zealand Security Intelligence 
Service (see Part 8, chapter 5). The quality of the counter-terrorism agencies’ relationship 
is fundamental to New Zealand’s counter-terrorism efforts. 


We heard from international experts that an effective relationship between New Zealand 
Police and the New Zealand Security Intelligence Service is critical to a successful 
counter-terrorism effort. They advised us to look closely at it. 


In this chapter we: 

a) describe the different functions, resources and powers of the counter-terrorism agencies; 
b) examine the state of the relationship between the counter-terrorism agencies; 

c) discuss positive aspects of the relationship before 15 March 2019; and 


d) describe the challenges that remain. 


12.2 The different functions, resources and powers of the 
counter-terrorism agencies 


The counter-terrorism agencies have complementary functions, powers and capabilities. 
Broadly, in the counter-terrorism effort, the New Zealand Security Intelligence Service's 

role is to identify potential terrorists and then collect and report intelligence on them. Its 
functions specifically do not include law enforcement. New Zealand Police have national 
security intelligence functions but their primary counter-terrorism role is to prevent terrorist 
activities, and - where they have occurred - to respond, investigate and prosecute the 
offenders. 


Reflecting their different functions, the two agencies must meet different thresholds to 

seek warrants to gather further information on potential terrorists. For a New Zealand 

Police search warrant to be issued, there must be reasonable grounds to suspect a criminal 
offence punishable by imprisonment and to believe that the search will find evidential 
material related to the offence." Similar grounds must be made out for a surveillance 
device warrant."®° For the New Zealand Security Intelligence Service to obtain an intelligence 
warrant, it must show that that the activity it wishes to carry out (for instance search or 
surveillance) would contribute to the protection of national security by identifying, enabling 
the assessment of or protecting against terrorism or violent extremism." It must also 

show that the proposed activity is necessary and proportionate for the purposes for which 





89 Search and Surveillance Act 2012, section 6. 
16° Search and Surveillance Act 2012, section 51. 


6" Intelligence and Security Act 2017, section 58. 
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the warrant is sought.’ Intelligence warrants can therefore be more forward looking and 
directed at understanding amorphous and often unknown targets, compared to New Zealand 
Police warrants, which are used for known targets and past and current offending. 


It makes sense for the counter-terrorism agencies to work closely together to pool 

their limited capacity and capability. Because the intelligence and security agencies in 

New Zealand do not have law enforcement powers, they need an enforcement agency like 
New Zealand Police to take action against potential terrorist threats. The intelligence and 
security agencies also benefit from the broad networks New Zealand Police have and the 
information they obtain from this. Conversely, the intelligence and security agencies can 
undertake activities that New Zealand Police cannot, and New Zealand Police often need the 
intelligence collected through these activities to fully understand the risks posed by subjects 
of interest. 


Both New Zealand Police and the New Zealand Security Intelligence Service can and 

do collect information and produce intelligence on terrorism threats in New Zealand. 
New Zealand Police’s presence throughout New Zealand and broad range of activities and 
connections in communities provide them with an enormous amount of information. 
Both have international relationships that provide them with valuable additional sources 
of information. 


It is not an easy relationship, as tensions between the functions and organisational cultures 
of the two types of agency require constant management. International practitioners 
advised us that a great deal of effort is required to ensure collaboration and communications 
between counter-terrorism agencies. They described that as a difficult, often uncomfortable, 
process. They offered some consistent advice about practices that can support these efforts: 


a) Co-location, which builds trust and assists staff within each agency to understand and 
appreciate both agencies’ respective roles and responsibilities, and how to best use their 
respective skills and experience. 


b) Ajoint leads process, which provides for the agencies to jointly assess the risk associated 
with lead information and then determine what level and type of resources each 
allocates to assess and manage that risk. It also supports better information sharing by 
ensuring agencies’ respective information sources are brought together. For example, an 
international expert told us that in the United Kingdom, over half of the Security Service’s 
leads come from the police and having a joint leads process ensures this information is 
promptly shared. 





762 Intelligence and Security Act 2017, section 61. 
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c) A joint operations protocol, which provides a clear framework for decision-making during 
an investigation, including which agency leads. It ensures that respective roles and 
responsibilities are clear and that each agency can contribute its specialist skills and 
information (for example, in intelligence and security agency-led investigations, police 
are involved early so intelligence collected can be used evidentially). It can also provide 
guidance on whether to extend an operation or bring it to a close, which can mitigate 
tensions between the agencies. 


d) Joint training and secondments, which help the agencies to understand each other’s 
capabilities and constraints. 


International practitioners also told us that the importance of the relationship means that 
agencies leading the counter-terrorism effort should monitor the progress of the relationship 
and support the intelligence and law enforcement agencies to work in a more integrated way. 


12.3 The state of the relationship between the counter-terrorism 
agencies 


A clear message we received during our inquiry was that, as recently as 2015, the relationship 
between the two counter-terrorism agencies was not functioning effectively. Internal 

New Zealand Police reviews conducted in 2011 and 2015 found that the varying expectations, 
attitudes and organisational cultures between the two agencies inhibited collaboration.’ 
There was no formal framework to guide and facilitate cooperation and coordination between 
the two agencies, which “resulted in restricted access to crucial intelligence and placed 
operation[al] relationships and effectiveness under strain”. 


We were advised that, around 2015, there were high levels of mutual mistrust between the 
agencies. There were indications that the New Zealand Security Intelligence Service would 
not share information at that time with New Zealand Police staff, whom they perceived 
could not be trusted to securely hold highly classified information. Equally, we heard 

from some New Zealand Police staff that there had been a high level of resistance from 
New Zealand Security Intelligence Service staff to sharing information with them, and that 
they were not receiving information they needed to know. 





163 New Zealand Police (2011), footnote 95 above; New Zealand Police (2015), footnote 95 above. 


164 New Zealand Police (2015), footnote 95 above. 
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The relationship has improved since then. Rebecca Kitteridge, the Director-General of 
Security, and Mike Bush, former New Zealand Police Commissioner, both described building 
the relationship between the two agencies over the last five years as a priority for them. 

This viewpoint was consistent with what we heard from staff in both agencies. While 
acknowledging that the relationship was not perfect or necessarily where they would want it 
to be, all of these individuals told us about the effort they and others had made to strengthen 
the relationship and how important it was for them to work together. The 2019 Arotake 
Review confirmed that the relationship between the two agencies had improved in recent 
years and was much more productive. However, it also acknowledged that the two agencies 
continued to experience technical and cultural barriers that prevented them from operating 
in “a truly joint fashion”."® 


12.4 Positive aspects of the relationship before 15 March 2019 


New Zealand Police and the New Zealand Security Intelligence Service noted a number of 
positive developments had occurred that helped improve the relationship between the two 
agencies. 


Joint governance 


The two agencies have created a three-tiered joint governance framework to drive 
cooperation: 


a) External Relationship Group - the executive level group that manages the relationship 
between the agencies and is intended to identify capability gaps that will impact on both 
agencies managing counter-terrorism risk. The two agencies created a Relationship 
Strategy in 2016, which is managed by this group. The External Relationship Group 
is attended by a New Zealand Police Deputy Commissioner and the Director-General 
of Security.'® 


b) Joint Management Committee - maintains strategic oversight of cooperation between 
the two agencies on counter-terrorism operations and investigations. It includes the 
heads of counter-terrorism from New Zealand Police and the New Zealand Security 
Intelligence Service. 


c) Operation Coordination Groups - these manage tactical operations and provide the key 
mechanism for coordinating decision-making and effort. 





*65 New Zealand Security Intelligence Service, footnote 57 above at page 20. 


66The Government Communications Security Bureau also attends. 
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Joint mechanisms and formal processes 


New Zealand Police and the New Zealand Security Intelligence Service have created joint 
mechanisms to coordinate management of leads and investigations'®’ to enhance agency 
interoperability: 


a) Joint leads process - the New Zealand Security Intelligence Service hosts a fortnightly 
Combined Counter-Terrorism Investigations and Leads Meeting (the Joint Leads Meeting) 
attended by the Department of Corrections, Immigration New Zealand, New Zealand 
Customs Service, New Zealand Police and (since September 2019) the Government 
Communications Security Bureau. Agencies bring leads they have, and the other 
agencies can look across their own data holdings to provide further intelligence on the 
lead. We heard a range of conflicting views from individuals in the counter-terrorism 
agencies about whether decisions on which agency leads an operation occur at this 
meeting, or outside it. 


b) Joint operations protocol - this governs the counter-terrorism agencies’ joint 
investigative and operational activity and sets out the process for establishing a joint 
operation. 


Co-location 


Since 2018, New Zealand Police and the New Zealand Security Intelligence Service have 
worked in the same secure facility in Auckland. Co-location is acknowledged within both 
agencies as a positive step that is helping to break down organisational culture barriers, 
build trust and enhance information sharing. Both agencies spoke about co-location as 
providing the opportunity for free and frank conversations needed to cooperate successfully. 
They were hopeful that co-location of the counter-terrorism agencies would progressively 
increase nationally. 


Joint training and secondments 


Some joint training has occurred between the counter-terrorism agencies in New Zealand. 
According to a senior official from New Zealand Police this assists in breaking down 
organisational culture barriers and provides both agencies with insights into how the other 
operates. 





"67 New Zealand Security Intelligence Service, footnote 57 above at page 20. 
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12.5 The challenges that remain 


A shared vision and plan to meet the challenges 


18 We heard from international practitioners that formal mechanisms and milestones are 
required to drive cooperation. With deliberate planning in place, the inevitable points of 
contention can be diagnosed and resolved early and purposefully. 


i9 The counter-terrorism agencies have a high-level vision of what the relationship could be 
- one in which they would not just share information but also work together cohesively as 
ateam. But currently there is not a joint strategy (and associated planning) to ensure the 
relationship progresses in a purposeful way and at an acceptable pace towards agreed 
outcomes. 


20 The counter-terrorism agencies have had a Relationship Strategy in place since 2016. This 
contains a high-level rationale and description of work streams, but lacks specific detail 
of how its aims will be achieved, by when, and how they will be measured. It is discussed 
regularly at the External Relationship Group. Although there was a high level of goodwill 
evident in these discussions, we did not see discussion of timeframes or follow-up on how 
the agencies were tracking against their work. There was also no evidence of discussions 
about the risks a more integrated way of working could present and how these would be 
mitigated. 


21 We were told that the plan for developing the relationship was to let it grow “organically”. 
What we heard and saw is that the good relationship between New Zealand Police and the 
New Zealand Security Intelligence was heavily reliant on personal relationships.’®* This 
dependency on personalities creates a risk."® 
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2 The Auckland co-location is a specific example of the lack of detailed planning within the 
relationship. While there was a Heads of Agreement governing the co-location, this did 
not constitute a robust project plan with agreed outcomes or a monitoring and evaluation 
plan. We heard that senior decision-makers reviewed the outcomes of the co-location, but 
the lessons from the process were not captured and assessed (at least in written format) 
for a wider national roll-out, despite there being a significant potential benefit that could 
be derived if it proves successful and a corresponding cost to national security if it fails. 





ww 


The Department of the Prime Minister and Cabinet does not see its leadership of the 
national security system as extending to the relationship between New Zealand Police and 
the New Zealand Security Intelligence Service. We discuss the role of the Department of the 
Prime Minister and Cabinet in the counter-terrorism effort in Part 8, chapter 3. 


NO 





168 New Zealand Security Intelligence Service, footnote 57 above at page 61. 


769 New Zealand Security Intelligence Service, footnote 57 above at page 61. 
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Understanding of each other’s functions 


The 9/11 Commission Report described counter-terrorism agencies working jointly as 
involving a step beyond cooperation, where agencies do not just seek assistance from the 
other, but rather jointly define problems and options for action.'”° 


Before 15 March 2019, New Zealand Police and the New Zealand Security Intelligence Service 
did not have shared definitions of either what constituted right-wing extremism or what 
would meet the threshold to be prioritised for investigation. As explained in Part 8, 

chapter 6, New Zealand Police had been monitoring extreme right-wing groups up until 2015. 
They told us that they did not provide reporting to the New Zealand Security Intelligence 
Service until the New Zealand Security Intelligence Service initiated a meeting on right-wing 
extremism in December 2018. This was because they did not think that the New Zealand 
Security Intelligence Service had an interest in or mandate to examine the extreme 
right-wing. The fact that New Zealand Police did not create a list of extreme right-wing 
individuals of concern until after 15 March 2019 (see Part 8, chapter 6) meant that this 
information had not been shared with the New Zealand Security Intelligence Service, 

and thus did not inform its baselining project on the extreme right-wing in New Zealand, 
which commenced in May 2018 (see Part 8, chapter 5). 


Because the counter-terrorism agencies did not discuss the threat posed by the extreme 
right-wing until late 2018, they had not by 15 March 2019 developed a joint understanding of 
the extreme right-wing in New Zealand and were still developing a shared understanding of 
each other’s functions relating to it. Since 15 March 2019, the two agencies have developed 
a shared definition of what constitutes right-wing extremism. 


We observed that the New Zealand Security Intelligence Service had a comparatively narrow 
view of New Zealand Police’s functions and capability. This can be illustrated by reference to 
the individual and the Barry Harry Tarry comments. 


We asked the New Zealand Security Intelligence Service what it would have done if the 
individual’s posts on The Lads Society Season Two Facebook page using the Barry Harry Tarry 
username (see Part 4: The terrorist and Part 6, chapter 4) had come to its attention. The 
New Zealand Security Intelligence Service told us that it would have: 


a) assessed the posts as not threatening violence and with a marginal connection to 
national security; 


b) seen the posts as relevant to its baselining project on domestic right-wing extremism 
(see Part 8, chapter 5) and opened a low priority lead; and 


c) regarded a lead of this nature as primarily a security intelligence discovery effort, which 
would fall within its function and mandate. 





7° The 9/11 Commission Report, footnote 81 above. 
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While the New Zealand Security Intelligence Service noted that it would have shared the lead 
in the Joint Leads Meeting, it considered this was not the type of lead New Zealand Police 
would be interested in because there were no indicators of a crime having been committed or 
a stated intent to undertake violence. 


We asked a senior New Zealand Police counter-terrorism officer the same question - what 
they would have done if the individual’s posts on The Lads Society Season Two Facebook page 
using the Barry Harry Tarry username had come to their attention. They said they would 
have seen the posts as posing limited risk due to the absence of an explicit threat. However, 
they highlighted concerns about the language used in the posts (including some that we 
have not reproduced in this report), which they said demonstrated deeply entrenched views 
and ideological links with the global extreme right-wing movement. New Zealand Police 
would have recorded this information in the National Intelligence Application, so that if 
further information about Barry Harry Tarry came to hand, they would be able to build a 
better intelligence picture. New Zealand Police would thus have been interested in this lead 
for their own intelligence gathering activities and to stay alert to signs indicating violent 
extremism. 


The senior New Zealand Police counter-terrorism officer also noted that while the 

New Zealand Security Intelligence Service leads in intelligence collection and New Zealand 
Police lead in evidence collection, this division of roles does not necessarily dictate which 
agency has primacy in acting on lead information received. Rather, whoever receives the 
information usually takes the lead. We were told that if New Zealand Police had received the 
Barry Harry Tarry posts, they would likely have taken the lead in collecting information even 
though there were no crime indicators or imminent threat present. 


As this discussion illustrates, New Zealand Police and the New Zealand Security Intelligence 
Service have different views of the former’s counter-terrorism intelligence role. 


As discussed in Part 7: Detecting a potential terrorist, the general tenor of what we were told 
by the counter-terrorism agencies is that they would probably not have made inquiries at the 
gym to identify Barry Harry Tarry. In the case of New Zealand Police, the decision whether to 
make such inquiries would have been influenced by how many of the individual’s other posts 
had also come to light. 
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Information sharing practices 


Both New Zealand Police and the New Zealand Security Intelligence Service have extensive 
information holdings that are relevant to New Zealand’s counter-terrorism effort. Neither 
has access to the other’s holdings. The New Zealand Security Intelligence Service needs 
to protect its sources of information, including information from international partners. 
Conversely, if the New Zealand Security Intelligence Service had uncontrolled access to 
New Zealand Police’s databases, this would likely present a risk to New Zealand Police’s 
relationship with the public. This absence of direct access means that information is only 
shared where there is a conscious decision to do so. 


The Intelligence and Security Act 2017 (see Part 8, chapter 14) allows the New Zealand 
Security Intelligence Service to create direct access agreements with New Zealand Police 
to access information related to financial intelligence and about people and locations that 
pose a physical threat to employees of the New Zealand Security Intelligence Service or 
the Government Communications Security Bureau. The New Zealand Security Intelligence 
Service and New Zealand Police have not yet established a direct access agreement. 


We heard from the counter-terrorism agencies that information flows between them had 
improved following the creation of an information sharing protocol, but that frustrations 
continued in some areas, such as the declassification and sanitisation of information by 

the New Zealand Security Intelligence Service. Some New Zealand Police staff remained 
frustrated that the New Zealand Security Intelligence Service does not make enough of an 
effort to provide declassified or sanitised information. This means that New Zealand Police, 
who primarily operate in an unclassified environment, cannot share information around their 
organisation. The limited number of secure facilities available to New Zealand Police and 
limited number of cleared New Zealand Police staff also act as barriers to information sharing 
(see Part 8, chapter 9). 


A key challenge for New Zealand Police is that there is no established legal or practice 
framework that allows the effective use of classified information in the legal process.” 
Individuals from the counter-terrorism agencies worked with the courts to create a 
workaround which allowed for classified information to be used in support of an application 
for a search or surveillance warrant. 


New Zealand Security Intelligence Service staff interviewed considered that they shared 
all relevant and necessary information even where they had to seek permission from an 
international partner agency first. While New Zealand Police staff understood that the 
New Zealand Security Intelligence Service was not able to share all information, some still 
perceived that relevant and necessary information was held back or unduly filtered. 





™™ New Zealand Law Commission National Security Information in Proceedings (May 2015) at page 29. 
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It was evident to us during interviews that when it came to information sharing there was a 
disconnect in how New Zealand Police and New Zealand Security Intelligence Service staff 
view the current arrangements. There are still high levels of mistrust on the part of some 
New Zealand Police staff, of which the New Zealand Security Intelligence Service appeared 
to be largely unaware. Senior officials from both agencies told us that frank conversations 
were being held. However, the ongoing mistrust we have referred to suggests to us these 
conversations have not resolved these tensions. 


Joint leads process 


New Zealand Police and the New Zealand Security Intelligence Service have the frameworks 
in place to work jointly. But the evidence presented to us suggests that these may not be 
providing sufficient guidance for the two agencies to work in a truly joint way. 


Before 15 March 2019, the two agencies did not have a shared approach to assessing risk. 
They did not have a standardised set of criteria for triaging, assessing and prioritising leads 
and they may have been applying different approaches to risk assessment. 


After 15 March 2019, the New Zealand Security Intelligence Service adopted the 

Australia Security Intelligence Organisation leads triage and assessment framework. 

The New Zealand Security Intelligence Service’s position is that the two agencies jointly 
decided to use this framework to ensure they have a consistent approach to assessing risk. 
However, we understand this was suggested by the New Zealand Security Intelligence Service 
after it had already made the decision to adopt the framework. New Zealand Police’s position 
is that they were not aware of being involved in any decision to jointly use the Australia 
Security Intelligence Organisation framework. New Zealand Police note they continue to use 
the Australia New Zealand Counter-Terrorism Committee framework, which is very similar. 


Before 15 March 2019 the counter-terrorism agencies did not have a shared platform to 
enter and manage leads. Instead, they compared their respective lists at the fortnightly 
Joint Leads Meeting. It was not always made clear which agency had been assigned specific 
actions and the progress was not always recorded or jointly visible. Most interviewees 
acknowledged that the absence of a centralised record of a joint list created a risk that 
information would be missed. 


In February 2020 the two agencies rectified this by implementing technology that supports 
the joint leads process. 
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Roles in joint investigations and operations 


From international experience, we have seen there needs to be clear division of labour and 
mechanisms to decide who is leading an investigation or operation if law enforcement and 
intelligence and security agencies are to work effectively together. The formal mechanisms 
New Zealand Police and the New Zealand Security Intelligence Service have in place to guide 
their joint decisions on investigations and operations are the joint leads process and joint 
operations protocol. 


As far as we can tell, there have not been issues between New Zealand Police and the 
New Zealand Security Intelligence Service with making decisions on when to move from 
an intelligence operation to executive action (which is sometime an issue for similar 
agencies in other countries). Instead, both New Zealand Police and the New Zealand 
Security Intelligence Service expressed frustration about what they saw as New Zealand 
Police’s inability to take action due to the lack of precursor terrorism offences in the 
Terrorism Suppression Act 2002. We discuss this further in the next chapter. 


There was not a clear and consistent understanding between New Zealand Police and the 
New Zealand Security Intelligence Service about how decisions are made about their joint 
activities, including when the decision is made about how investigations will be led and when 
joint activity will be pursued. We heard from some interviewees that this decision can occur 
in the Joint Leads Meeting. Others said that these decisions only happen in the Operational 
Coordination Groups. According to New Zealand Police staff, the decision to undertake a 
joint operation was “never that clean” and the joint operations protocol did not provide much 
guidance on this. The lack of clarity can result in some duplication of effort, for example 
where an agency may start collecting information on a lead without liaising with the other. 


We were told that separate investigation plans and warrants may be necessary in relation 

to the same individual due to the different mandates and functions of the agencies. But it is 
important that there is a joint plan guiding these efforts. In theory, Operational Coordination 
Groups should ensure that investigations are coordinated and appropriate deconfliction 
occurs. However, from what we heard these groups seemed to be convened to provide 
coordination when operations were already underway and not to set a plan for joint activity 
at the outset of an operation. As an example, New Zealand Security Intelligence Service staff 
told us there had likely been at least one instance where more than one intelligence and 
security or law enforcement agency were surveilling an individual in the period after the 

15 March 2019 terrorist attack. This was at a time when events were unfolding quickly and 
there were large numbers of new leads. 
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Community engagement practice and impact 


Both agencies’ counter-terrorism efforts rely on seeking information from members of 
communities and engaging with communities more generally. 


Public trust and confidence is critical to the operation of both agencies. In Part 8, 

chapter 6 we described how New Zealand Police did not always communicate what actions 
they had taken in ways that provided reassurance to Muslim communities. We observed 
similar issues in relation to the New Zealand Security Intelligence Service. In some cases, 
the New Zealand Security Intelligence Service staff and Muslim individuals or communities 
they engaged with had different understandings of the purpose and expected outcomes of 
their interactions. This was particularly the case where people had raised concerns about 
potential threats against them and their communities and expected that action would be 
taken. The New Zealand Security Intelligence Service staff seemed largely unaware of this 
expectation. 


There appears to have been limited discussion on or coordination of how the 
counter-terrorism agencies undertake community engagement and manage the impact 

of their activities as a whole on communities. In some cases New Zealand Police and 

the New Zealand Security Intelligence Service will be talking to the same individuals and 
groups in their efforts to build contacts in communities. We heard from individuals and 
groups that sometimes they are spoken to separately by New Zealand Police and the 

New Zealand Security Intelligence Service and are unsure as to whether the two agencies are 
aware of this. Muslim communities have continued to feel that New Zealand Police and the 
New Zealand Security Intelligence Service’s community engagement efforts are not joined up. 


There was concern raised by New Zealand Police that in a situation where the two agencies 
work closely together, negative perceptions that community members may have of the 
New Zealand Security Intelligence Service could negatively impact on New Zealand Police’s 
relationships with communities. 
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There has been some discussion of all of this between the counter-terrorism agencies, but 
there has not yet been agreement to a high-level strategy, nor coordination, of how they 
undertake community engagement. 





12.6 Concluding comments 


The relationship between New Zealand Police and the New Zealand Security Intelligence 
Service is critical to a well-functioning counter-terrorism effort. The two agencies have made 
positive progress in developing their relationship. This has been aided by the development 
of formal mechanisms to better enable the sharing of information and cooperation on 
investigations. 
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Working jointly requires more than just cooperation. It requires the counter-terrorism 
agencies to jointly define problems and options for action. Before 15 March 2019 the two 
agencies were able to assist each other in developing leads and investigations. There was, 
however, still a tendency for them to work in parallel rather than jointly. For example, they 
had not developed a shared understanding of the threat of the extreme right-wing, nor 
developed clear and consistent approaches to joint management of leads and investigations. 
The future will require a deeper level of integration where both agencies have a shared 
understanding of the threatscape and what resources and capabilities they are each 
contributing to the counter-terrorism effort. 


Despite good progress having been made, there remains a gap between what is considered 
international best practice, and what is happening in New Zealand. We did not observe 
sufficient structure and guidance to ensure the counter-terrorism agencies are compelled to 
push through difficulties. In letting the relationship develop organically the success of the 
relationship has relied on personal relationships, which risks positive developments being 
lost as personnel change. 
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Chapter 13: The Terrorism Suppression Act 2002 
and the pre-criminal space 


13.1 Overview 


Acts of terrorism involve criminal offences. They attract liability under the general criminal 
law. So, an act of terrorism resulting in death can result in a prosecution for murder. As well, 
the Terrorism Suppression Act 2002 creates several offences that are specific to terrorism. 


The ways in which New Zealand’s general criminal law and the Terrorism Suppression Act 
operate have left a pre-criminal space in which potential terrorists can plan and prepare 
acts of terrorism without committing criminal offences. This space is larger than members 
of the public might expect, and its broad scope has significant implications for the 
counter-terrorism agencies. 


In this chapter we discuss the ways in which issues associated with this pre-criminal space 
could be addressed through the creation of precursor terrorism and travelling offences and 
administrative mechanisms for reducing risks. 


At this point brief explanations may be of assistance: 


a) Precursor terrorism offences are offences that criminalise behaviour that is preliminary 
to acts of terrorism. Other jurisdictions have such offences. For example, in Australia 
there are offences of planning or preparing for a terrorist act, providing or receiving 
training connected with terrorist acts, possessing things in preparation for terrorist acts 
and collecting or making documents connected with preparation for terrorist acts. 

There are similar offences in the United Kingdom. 


b) Travelling offences are a subset of precursor terrorism offences. They criminalise travel 
(and attempts to travel) internationally for terrorist purposes. Such offences address 
the behaviours of those who aspire to be foreign terrorist fighters. New Zealand has 
not created specific travelling offences. 


c) Administrative mechanisms can mitigate risk. New Zealand has two mechanisms - 
withdrawal of travel documentation and control orders. Both focus on foreign 
terrorist fighters. 


Our primary but not exclusive focus in this chapter is on precursor terrorism offences. In this 
chapter we: 


a) outline the legislative history of the Terrorism Suppression Act; 


b) discuss precursor terrorism offences, travelling offences and administrative mechanisms 
for reducing risk; 


c) review the legislative stewardship of the Terrorism Suppression Act; and 


d) examine whether there should be precursor terrorism offences. 
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13.2 Legislative history 


Before 2002, terrorism was referred to in several statutes but the overall legislative approach 
was piecemeal.'” Terrorism was not addressed systematically until the enactment of the 
Terrorism Suppression Act. This Act was passed to give effect to international conventions 
and United Nations Security Council resolutions, including Resolution 1373.'% It was enacted 
with speed following the attacks of 11 September 2001.4 


The Act has been amended on a few occasions, most significantly by the Terrorism 
Suppression Amendment Acts of 2003, 2005 and 2007. These Amendment Acts were 
introduced to ensure that New Zealand complied with international obligations and to 
keep up to date with international developments. The Act was recently supplemented by 
the Terrorism Suppression (Control Orders) Act 2019 (see 13.5 Administrative mechanisms 
for reducing risk). 


The Act has never been subject to a comprehensive review of whether it is fit for purpose. 


13.3 Precursor terrorism offences 


International obligations 


Resolution 1373 of the United Nations Security Council directed countries to: 


Ensure that any person who participates in the financing, planning, preparation or 
perpetration of terrorist acts or in supporting terrorist acts is brought to justice and ensure 
that, in addition to any other measures against them, such terrorist acts are established as 
serious criminal offences in domestic laws and regulations and that the punishment duly 
reflects the seriousness of such terrorist acts. 


In 2016, the Counter-Terrorism Committee of the United Nations published the Global survey 
of the implementation of Security Council resolution 1373 (2001) by Member States," which 
assessed countries’ compliance with Resolution 1373. In commenting on a group of countries 
that included New Zealand, the survey provided the following observations under the 
heading “Planning and preparation”: 


All States have established in national legislation specific provisions that criminalize 
terrorist acts of planning, preparation, facilitation, support, including financial support, 
for terrorist acts, or conspiracy to commit terrorist acts, or are able to prosecute such 
conduct on the basis of general criminal provisions of aiding or similar notions of 
assistance."”° 





"? See for example the Aviation Crimes Act 1972, Crimes (Internationally Protected Persons and United Nations and Associated 

Personnel, and Hostages) Act 1980, International Terrorism (Emergency Powers) Act 1987 and Maritime Crimes Act 1999. 

3 See Terrorism (Bombings and Financing) Suppression Bill 2002 (121-2) (select committee report) at page 1. 

™4 For the background, see Matthew Palmer “Counter-Terrorism law” (2002) New Zealand Law Journal 456. 

™ United Nations Security Council Counter-Terrorism Committee Executive Directorate Global survey of the implementation of 
Security Council resolution 1373 (2001) by Member States (October 2016). 


176 United Nations Security Council Counter-Terrorism Committee Executive Directorate, footnote 175 above at page 101. 
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New Zealand is thus required to criminalise acts of planning and preparation for terrorism. 
This criminalisation can be brought about either by New Zealand’s general criminal law or 
through specific precursor terrorism offences. 


Planning and preparation offence under New Zealand’s general law 


If planning and preparation activity is closely associated in time with the intended offence 
(for instance, a robber lying in wait for a potential victim) the offender can be prosecuted for 
an attempt to commit the offence. Close proximity to the intended crime is required. And 

if two or more people are involved in planning and preparation for an offence, they can be 
prosecuted for conspiracy. But under the general criminal law of New Zealand, it is nota 
discrete offence to plan or prepare to commit another offence. So it is not an offence to plan 
or prepare to murder someone, or to rob a bank. 


This means that New Zealand cannot claim to be in compliance with its obligations under 
Resolution 1373 on the basis of our general criminal law. 


Relevant provisions of the Terrorism Suppression Act 


A key feature of the Act is the definition of a “terrorist act” in section 5: 


Terrorist act defined 
(1) An act isa terrorist act for the purposes of this Act if— 


(a) the act falls within subsection (2); or 


(2) An act falls within this subsection if it is intended to cause, in any 1 or more 
countries, 1 or more of the outcomes specified in subsection (3), and is carried 
out for the purpose of advancing an ideological, political, or religious cause, 
and with the following intention: 


(a) to induce terror in a civilian population; or 


(b) to unduly compel or to force a government or an international organisation 
to do or abstain from doing any act. 
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(3) The outcomes referred to in subsection (2) are— 


(a) the death of, or other serious bodily injury to, 1 or more persons (other than 
a person carrying out the act): 


(b) aserious risk to the health or safety of a population: 


(c) destruction of, or serious damage to, property of great value or importance, 
or major economic loss, or major environmental damage, if likely to result in 
1 or more outcomes specified in paragraphs (a), (b), and (d): 


(d) serious interference with, or serious disruption to, an infrastructure facility, if 
likely to endanger human life: 


(e) introduction or release of a disease-bearing organism, if likely to devastate the 
national economy of a country. 


When first passed, the Act did not create an offence of engaging in a terrorist act. This 
deficiency was addressed in 2007 with the insertion of section 6A. It provides: 


6A Terrorist act 
(1) A person commits an offence who engages in a terrorist act. 


(2) A person who commits a terrorist act is liable on conviction to imprisonment for life 
or a lesser term. 


There are a number of other terrorism offences created by the Act. These include financing 
of terrorism (section 8), providing property or financial or related services to a designated 
terrorist entity (section 10), recruiting members of terrorist groups (section 12) and 
participating in terrorist groups (section 13). With the exception of those offences, there is 
nothing explicit in the Act to criminalise activities that are preliminary to acts of terrorism. 
And those offences only apply to terrorist activity in which two or more people are involved 
(for example, the recruitment offence requires both a recruiter and a potential recruitee, 
while the financing offence requires a fundraiser as well as a donor). They do not apply to the 
activities of lone actor terrorists. There are thus no explicit offences that catch the activity of 
a lone actor terrorist that is preliminary to a terrorist act. 
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Is there nonetheless a planning and preparation offence? 


For a number of years, the counter-terrorism agencies acted on the understanding that 
preparing or planning acts of terrorism are not offences. Recently, however, the Deputy 
Solicitor-General consented to a prosecution based on the view that the Act does create 
such offences. 


In the prosecution that followed, the Crown relied on section 25(1), which provides: 


25 Carrying out and facilitating terrorist acts 


(1) For the purposes of this Act, a terrorist act is carried out if any 1 or more of the 
following occurs: 


(a) planning or other preparations to carry out the act, whether it is actually carried 
out or not: 


(b) acredible threat to carry out the act, whether it is actually carried out or not: 
(c) an attempt to carry out the act: 


(d) the carrying out of the act. 


The prosecution argued that the section 25(1) definition of “carrying out a terrorist act” meant 
that engaging in a terrorist act under section 6A included “planning or other preparation for 
such an act”. 


The High Court found that this argument was not correct and that planning and preparation 
for a terrorist act are not, in themselves, offences. 


We regard the result arrived at by the High Court as correct and, more importantly, as 
settling the law. For this reason we do not engage with the intricate issues of statutory 
interpretation that the case raised. 


Where New Zealand stands with its international obligations 


As New Zealand does not have precursor terrorism offences and our general criminal law 
does not criminalise planning and preparation to commit an offence, New Zealand is in 
breach of its international obligations under Resolution 1373 of the United Nations Security 
Council. 
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Practical implications 


There were differing views, at least within New Zealand Police, as to whether section 25(1) 
meant that there were planning and preparation offences. Despite this, New Zealand 
Police and the New Zealand Security Intelligence Service generally have operated on the 
assumption - now shown to be correct - that there are no such offences. This has limited 
their ability to bring particular investigations to a conclusion. 


We have seen case studies that indicate that if there had been planning and preparation 
terrorism offences, some counter-terrorism targets could have been prosecuted under them. 
The ability to bring a prosecution would have been assisted by a wider range of precursor 
terrorism offences including, say, travelling offences. Whether such prosecution would 
necessarily have been appropriate - for instance where planning was in its very early stages - 
is perhaps another matter. But the availability of such offences would have provided a point 
of intervention, for example, by warning the target that they could be prosecuted if they did 
not agree to participate in community countering violent extremism measures. As well, the 
absence of such offences hinders the ability of New Zealand Police to obtain warrants under 
the Search and Surveillance Act 2012. 


We can illustrate the practical difficulties associated with the absence of planning and 
preparation offences by reference to what would have happened if the counter-terrorism 
agencies had become aware that the individual was planning a terrorist attack. 


Had this happened, it would have been open to New Zealand Police to cancel his firearms 
licence and seize his firearms. Such action would not have prevented the individual acquiring 
firearms on the black market or adjusting his proposed mode of attack to involve, say, a 
motor vehicle. It may also have been possible to require him to return to Australia, an option 
that of course would not have been available if he was a New Zealand citizen. 


Depending on the way the individual stored his semi-automatic rifles and large capacity 
magazines, it might have been possible to prosecute him under the Arms Act 1983 

(see Part 4: The terrorist). But although such a prosecution would have been a completely 
inadequate response to his conduct, the alternative - waiting until he got sufficiently close 
to the intended terrorist attack to prosecute him for attempted murder or attempting to 
engage in a terrorist act - would not have been a very palatable option. 


It would have been a fine judgement call as to the point at which the individual’s preparation 
would have been sufficiently proximate to the intended crime to result in criminal liability for 
an attempt. To be reasonably confident of conviction, New Zealand Police would probably 
have had to wait until the morning of 15 March 2019 when the individual departed Dunedin 
for Christchurch. Keeping the individual under surveillance for a protracted period would 
have put New Zealand Police and the New Zealand Security Intelligence Service under 
extraordinary pressure and would not have been a fail-safe way of preventing an attack. 
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Internationally there is a well-recognised and longstanding healthy tension between law 
enforcement and intelligence and security agencies about when to transition from an 
intelligence investigation to executive action, such as arrest. The tension arises because 
the drivers for each agency are different. The imperative for an intelligence and security 
agency is to discover all threats to national security. An operation may yield greater 
intelligence gains if action is not taken at the first opportunity. Law enforcement agencies 
may wish to act more quickly on intelligence, particularly where public safety may be at risk. 
Interestingly, we have seen no evidence of such a tension between the New Zealand 
counter-terrorism agencies - something we see as a likely consequence of the absence 

of precursor terrorism offences. 


13.4 Travelling offences 


United Nations Security Council Resolution 2178 of 2014 requires states to: 


... ensure that their domestic laws and regulations establish serious criminal offenses 
sufficient to provide the ability to prosecute and to penalize in a manner duly reflecting the 
seriousness of the offense: 


their nationals who travel or attempt to travel to a State other than their States of residence 
or nationality, and other individuals who travel or attempt to travel from their territories to a 
State other than their States of residence or nationality, for the purpose of the perpetration, 
planning, or preparation of, or participation in, terrorist acts, or the providing or receiving 
of terrorist training; ... . 


New Zealand has not yet enacted laws that create the offences called for by the Resolution. 
Proposals to create such offences are currently under consideration. 


13.5 Administrative mechanisms for reducing risk 


The two mechanisms identified at the beginning of the chapter (withdrawing travel 
documents and control orders) have been provided for in respect of foreign terrorist fighters. 
The withdrawal of travel documents is designed to prevent travel out of New Zealand by 
prospective foreign terrorist fighters. The control orders regime is intended to mitigate the 
risks posed by returning foreign terrorist fighters. 


Sections 27GA-27GF of the Passports Act 1992 provide for refusals to issue, and suspension 
and cancellation of, New Zealand travel documents. These mechanisms were first introduced 
in 2014 and enable disruption of attempts to travel overseas for terrorist purposes. This is 
not a fail-safe system (for instance, in respect of people who have more than one passport) 
but, as we have noted, New Zealand has not yet criminalised preparation for such travel. 
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The offence of participation in terrorist groups created by section 13 has effect outside 
New Zealand. So a New Zealander who has participated in a terrorist group overseas and 
returns to New Zealand can be prosecuted under section 13. 


The Terrorism Suppression (Control Orders) Act 2019 provides for control orders in respect 
of people who have returned from overseas and who, by reason of their actions ina 
foreign country, pose real risks of “engaging in terrorism-related activities”. Once made, 
these control orders impose prohibitions or restrictions on the activities of such people in 
New Zealand. 


The narrow scope of this regime means that it is not an appropriate substitute for the 
creation of precursor terrorism offences. 


13.6 Legislative stewardship 


Departmental chief executives are responsible for maintaining the currency of any legislation 
administered by their departments.'”” This means those chief executives should be providing 
free and frank advice regarding whether that legislation is fit for purpose. 


The Terrorism Suppression Act is jointly administered by the Ministry of Foreign Affairs and 
Trade and the Ministry of Justice. Section 70 of the Act required a one-off review of certain 
provisions of the Act, which was completed in 2005. Amendments were made to the Act 

in 2005 and 2007. These provided further offences (partly in response to international 
obligations) and made changes to the designation of terrorist entities. But the Act’s content 
and workability have never been the subject of a fitness for purpose review. 


The workability of the Terrorism Suppression Act was called into question in 2008 after 

the then Solicitor-General declined to give permission to lay charges under the Act 
following Operation Eight (see Part 8, chapter 2). He said that the relevant provisions were 
“unnecessarily complex, incoherent and as a result it is almost impossible to apply [in the 
circumstances of that case]”. 


The Terrorism Suppression Act was referred to the Law Commission for review but the 
review was not progressed. It was initially put on hold pending the trial of the remaining 
Operation Eight defendants, and then in 2012 was removed from the Law Commission’s work 
programme by Hon Judith Collins, then Minister of Justice. The Law Commission later listed 
“Criminal Offences in the Terrorism Suppression Act” as part of its programme for 2013-2014 
but the then Minister again removed it. Hon Judith Collins said that “the initial concerns 
arising from the Urewera case have been addressed by the passage of the Search and 
Surveillance Act 2012, and there does not appear to be any substantial or urgent concerns 
arising from the operation of the Act”."”8 





77 Public Service Act 2020, section 52(1)(d)(ii). 


78 Adam Dudding “Review of terror laws stopped” Sunday Star Times (New Zealand, 15 September 2013) 


http://www.stuff.co.nz/national/politics/9166763/Review-of-terror-laws-stopped. 
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In 2014, New Zealand Police drew attention to gaps in the legislative framework. While 
New Zealand Police did not consider that these gaps affected their ability to manage 

a particular risk presenting at that time, they considered that the gaps might become 
problematic if the situation evolved. A 2015 Cabinet paper noted potential areas 

for legislative review and reform, but none of this work was progressed at that time. 
New Zealand Police expressed increasing concern about the possible inadequacy of the 
legislation over this period. The New Zealand Security Intelligence Service shared these 
concerns. 


In November 2017, the Department of the Prime Minister and Cabinet advised the Prime 
Minister, Rt Hon Jacinda Ardern, that it was unclear if New Zealand’s counter-terrorism 
legislation was fit for purpose and that it intended to discuss these issues with the relevant 
Public sector agencies. In May 20718, the Director-General of Security and the Commissioner 
of Police briefed the Prime Minister, Rt Hon Jacinda Ardern, and the Minister Responsible 
for the New Zealand Security Intelligence Service, Hon Andrew Little, on the evolving 
terrorism threatscape and related counter-terrorism legislative challenges. At that time, 
Ministers sought advice on the counter-terrorism legislative settings. Advice from the 
Department of the Prime Minister and Cabinet and the Ministry of Justice was provided to 
Rt Hon Jacinda Ardern, Minister for National Security and Intelligence and Hon Andrew Little, 
Minister of Justice, in August 2018. 


The two Ministers subsequently directed the Department of the Prime Minister and Cabinet 
and the Ministry of Justice to undertake further policy work on: 


a) the workability of the Terrorism Suppression Act; 

b) new offences that might facilitate earlier intervention by law enforcement; 
c) consideration of criminalising travel by foreign terrorist fighters; and 

d) consideration of control orders for people who pose a terrorism risk. 


Ministers noted that this did not necessarily mean that any resulting policy proposals would 
be accepted by government and emphasised that they wanted to “proceed with caution”. 


As at 15 March 2019, officials were considering the issues but no advice had been provided 
to Ministers. Advice on priorities was subsequently provided to Hon Andrew Little, Minister 
of Justice, which led to some counter-terrorism policy work on, for example, control orders 
and financing of terrorism, being expedited at the expense of other policy projects on, for 
example, organised crime. 
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Since that time, the government has passed the Terrorism Suppression (Control Orders) Act 
2019, creating a civil control order regime that applies to individuals who have engaged in 
terrorist activity overseas. Work is continuing on possible new terrorism related offences and 
the workability of the definition of “terrorism” in the Terrorism Suppression Act. A separate 
but related piece of work will respond to the Law Commission’s report on the use of national 
security information in court proceedings.’ 


As this discussion illustrates, the issues discussed in this chapter have been recognised 
for some time but the 2014 amendments to the Passports Act and the creation of a limited 
control orders regime in 2019 have been the only tangible progress. 


13.7 Should there be precursor terrorism offences? 


The creation of precursor terrorism offences would require analysis of policy issues. These 
are explored in a recent article in the Criminal Law Review that criticises the ways in which 
precursor terrorist offences have been defined and prosecuted in England and Wales."*° 
The precursor offences primarily discussed are preparing acts of terrorism, disseminating 
terrorist publications and collecting information that is likely to be useful to a terrorist. 
They are “among the most frequently prosecuted terrorism offences”. There are issues 
with the preparation offence. It can catch a person’s preliminary behaviour (for example, 
research into possible methods and targets) even if their intention to engage in acts of 
terrorism was only conditional (for instance, as depending on future circumstances) and 
thus not necessarily very likely to be carried out. 


For these and other reasons reviewed in the article, there is at least a debate to be had 
before simply expressed precursor terrorism offences (including planning and preparation 
offences) are created. This is not to seek to pre-empt the result of such a debate, as simply 
expressed preparation offences exist both in Australia and also in the United Kingdom. Also 
material to such debate are New Zealand’s international obligations. 


We see much less scope for debate on the appropriateness of criminalising conduct that is 
connected to the intended act of terrorism, for instance acquiring weapons, terrorist training 
or preparation in relation to an identifiable potential target (such as hostile reconnaissance 
or specific internet research). 





9 New Zealand Law Commission The Crown in Court: A Review of the Crown Proceedings Act and National Security Information in 
Proceedings Report 135 (Wellington, December 2015). 


"8° andrew Conford “Terrorist Precursor Offences: Evaluating the Law in Practice” (2020) Criminal Law Review at page 663. 


*8' andrew Conford, footnote 180 above at page 664. 
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13.8 Concluding comments 


There has been no complete review of whether the Terrorism Suppression Act and its 
amendments are fit for purpose. 


Extending the reach of the criminal law (such as by creating precursor terrorism offences, 
which would criminalise planning and preparation for terrorism and perhaps other activities) 
would be controversial. So too are preventative measures that do not depend upon 
conviction for a criminal offence (such as withdrawing travel documents or imposing control 
orders). We discuss this further in Part 10: Recommendations. 


Our primary concern is with the absence of precursor terrorism offences. We accept 

that there is scope for legitimate concerns about the risks of over-criminalisation and 
discrimination against Muslim communities and other potential target communities. 

The concerns can be mitigated by careful drafting. As well, there are what we see as 
countervailing factors, particularly our current non-compliance with international obligations 
and the broader context of the practical difficulties of dealing with potential terrorists and 
the associated risks to public safety. 
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Chapter 14: The Intelligence and Security Act 2017 


14.1 Overview 


The Intelligence and Security Act 2017 was enacted following the 2016 Cullen-Reddy Report 
and gives effect to many of its recommendations.” The Act governs the operations of 

the New Zealand Security Intelligence Service (see Part 8, chapter 5) and the Government 
Communications Security Bureau (see Part 8, chapter 7), which are defined in the Act as the 
“intelligence and security agencies”."® 


In this chapter, we review the way the Intelligence and Security Act operates in respect of 
the counter-terrorism effort. The purpose of this exercise is to identify the legal boundaries 
within which the intelligence and security agencies must operate. We do this by reference to: 


a) the objectives and functions of the agencies; 

b) oversight of the agencies; 

c) the overarching constraints on the agencies; 

d) the provisions of the Act dealing with the collection of intelligence; 

e) the limited statutory mandate of the Department of the Prime Minister and Cabinet; 
f) the extent to which the Act contemplates bulk collection and acquisition of data; and 


g) the relationships between the Inspector-General of Intelligence and Security and the 
agencies. 


We conclude the chapter with a discussion of other issues, including difficulties and 
uncertainties with the operation of the Act. 
14.2 Objectives and functions of the agencies 


The objectives of the intelligence and security agencies are provided for by section 9: 


9 Objectives of intelligence and security agencies 

The principal objectives of the intelligence and security agencies are to contribute to— 
(a) the protection of New Zealand’s national security; and 
(b) the international relations and well-being of New Zealand; and 


(c) the economic well-being of New Zealand. 





82 Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM, footnote 38 above. 


*83 Intelligence and Security Act 2017, section 4. 
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Countering terrorism falls naturally within the section 9(a) objective. 


The functions of the agencies are identified in sections 10 to 15 and include: 


10 Intelligence collection and analysis 
(1) Itis a function of an intelligence and security agency to— 


(a) collect and analyse intelligence in accordance with the New Zealand 
Government’s priorities; and 


(b) provide any intelligence collected and any analysis of that intelligence to 1 or 
more of the following: 


(i) the Minister: 
(ii) the Chief Executive of the Department of the Prime Minister and Cabinet: 


(iii) any person or class of persons (whether in New Zealand or overseas) 
authorised by the Minister to receive the intelligence and any analysis of 
that intelligence. 


The statutory objectives and functions of the agencies are the same, despite their very 
different capabilities. 


Government priorities for intelligence and security are set out primarily in the 

National Security and Intelligence Priorities (see Part 8, chapter 3). For the purposes of 
section 10(1)(a) they specify the topics on which the agencies may collect and analyse 
intelligence. It remains open to the government to identify priorities (and thus authorise 
collection and analysis) in other ways. What is important is that the agencies are not entitled 
to self-task. They may only collect and analyse intelligence to the extent authorised by 
priorities set by the government. 


Section 13(1) and (2) authorise cooperation between the agencies. It also provides for 
cooperation between the agencies and the New Zealand Defence Force and New Zealand 
Police. 


The Act also sets out functions that do not fall within the agencies’ mandate. In particular, 
section 16 provides that it “is not the function of [the agencies] to enforce measures for 
national security” except in very limited circumstances. So, it is open to the agencies to 
collect and analyse intelligence in accordance with priorities set by the government, but they 
cannot use this intelligence for enforcement purposes. Where enforcement is appropriate, 
this must be carried out by another Public sector agency, such as New Zealand Police 

(see Part 8, chapters 6 and 12). 
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14.3 Oversight of the agencies 


Oversight of the intelligence and security agencies and their activities is provided for ina 
number of ways: 


a) They are subject to ministerial oversight. The minister responsible for the intelligence 
and security agencies has functions in relation to the issue of warrants, the approval 
of business records directions and permission to access restricted information 
(see 14.6 The provisions of the Act dealing with the collection of intelligence). 

As well, the agencies are required to have regard to Ministerial Policy Statements 
issued under section 206 (see 14.5 Overarching constraints on the agencies). 


b) The approval of a Commissioner of Intelligence Warrants (who must previously have 
held office as a High Court judge) and the relevant minister is required for the issue 
of business records directions and certain warrants. Permission from the Chief 
Commissioner of Intelligence Warrants is also required for access to certain restricted 
information. 


c) The Intelligence and Security Committee is a statutorily recognised (by section 192) 
Parliamentary committee that has oversight functions provided for in section 193. 


d) There is an Inspector-General of Intelligence and Security who has extensive 
oversight functions. 


e) The agencies are subject to judicial supervision through court proceedings." 
f) The agencies are subject to Privacy Commissioner and Ombudsman oversight. 


In this chapter, we focus on the roles of the Intelligence and Security Committee and 
the Inspector-General of Intelligence and Security. 


The role of the Parliamentary Intelligence and Security Committee 


The functions and membership of the Parliamentary Intelligence and Security Committee 
are provided for in the Act. Its members must be drawn from the parties in government and 
those in opposition. 


Under section 193, the Intelligence and Security Committee’s functions include examining 
the policy, administration and expenditure of the agencies, receiving their annual reports 
and conducting annual reviews. There are, however, constraints. While the Intelligence 
and Security Committee can consider any matter with intelligence or security implications 
referred to the committee by the prime minister, this does not extend to matters “relating 
directly to activities of an” agency.'® As well, section 193(2)(b) provides that the functions 
do not include: 





84 Intelligence and Security Act 2017, section 162. 


*85 Intelligence and Security Act 2017, section 193(1)(f). 
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... Inquiring into any matter that is operationally sensitive, including any matter that relates 
to intelligence collection and production methods, or sources of information .... 


Sections 202-205 and 224 address the provision of “sensitive information” to the Intelligence 
and Security Committee and how such information is to be dealt with if provided. Sensitive 
information is information that, if disclosed, would be likely to prejudice national security, 
prejudice the maintenance of the law or endanger anyone. Under section 203(1)-(3), whether 
sensitive information is disclosed depends on the assessment of the Director-General of the 
relevant agency or the direction of the prime minister. 


There is an Intelligence and Security Committee of the United Kingdom Parliament. It can, 
and does, inquire into the operations and activities of the intelligence and security agencies 
in the United Kingdom. 


A more extensive and public role for New Zealand’s Intelligence and Security Committee 
would be desirable. It would provide further transparency and general assurance to the 
public as to the activities of the agencies and thus improve their social licence. Sucha 
role for the Intelligence and Security Committee would require reasonably high levels of 
cross-party political consensus and trust. In the current environment, we would like to 
think that such consensus and trust can be achieved. 


The role of the Inspector-General of Intelligence and Security 


The functions of the Inspector-General of Intelligence and Security are specified in 
section 158. They include: 


a) conducting inquiries into: 
i) anagency’s compliance with the law; 


ii) whether a New Zealander has been adversely affected by an agency’s action, 
omission, policy or procedure; and 


iii) the propriety (appropriateness) of an agency’s actions; 


b) dealing with complaints made under section 171 of the Act, which provides for 
complaints by employees of the agencies or any New Zealander who claims to have been 
“adversely affected” by an agency’s actions, inaction, policies or procedures; and 


c) conducting annual reviews and unscheduled audits on warrants (including their issue), 
compliance systems and the carrying out of any authorised activity. 


567 


> 
wn 
wn 
© 
wn 
eels 
=] 
oa 
ct 
a 
O 
ie} 
° 
= 
=] 
et 
2 
x 
ct 
© 
3 
So 
= 
3 
© 
=R 
° 
+ 





The last two Inspectors-General of Intelligence and Security made a practice of reviewing 
every warrant obtained by the agencies (see 14.6 The provisions of the Act dealing 

with the collection of intelligence). At the time the Act was under consideration by 
Parliament, this scrutiny was described as a component - along with requirements for 
approval of warrants by the responsible minister and a Commissioner of Intelligence 
Warrants - of the “triple-lock” protection for New Zealanders from surveillance. 


Section 163 provides that a conclusion by the Inspector-General of Intelligence and Security 
that the issue of a warrant or conduct carried out under the warrant was irregular does not 
invalidate the warrant or render the activity illegal. 


14.5 Overarching constraints on the agencies 


The agencies have a duty to act in accordance with New Zealand law and “all human 
rights obligations recognised in New Zealand law”. They must also act independently and 
impartially, with integrity and professionalism and in a manner that facilitates democratic 
supervision.'© 


The obligation of the agencies to act appropriately is reinforced by the section 158(1)(c) 
power of the Inspector-General of Intelligence and Security to conduct an “inquiry into the 
propriety of particular activities of an intelligence and security agency”. 


There may be scope for debate as to what is unlawful and thus would be a breach of 

the agencies’ obligation to act in accordance with New Zealand law. Unlawful activities 
must include the commission of criminal offences (whether under the Crimes Act 1961 or 
otherwise) and behaviour that is contrary to statute (for example, the Privacy Act 1993 and 
the New Zealand Bill of Rights Act 1990). But whether it also encompasses civil wrongs 
(for example, trespass or a breach of contract) is unclear. Activities that would otherwise 
be unlawful can be authorised by warrant (see 14.6 The provisions of the Act dealing with 
the collection of intelligence). 


In performing their functions, agencies are required by section 209 “to have regard to 
Ministerial Policy Statements” issued under section 206. These cover a wide range of lawful 
activities, including the collection of information, conducting surveillance in public places, 
obtaining and using publicly available information and requesting information from third 
parties. The Ministerial Policy Statements impose requirements on the agencies to act only 
in ways that are both necessary for the agency to pursue its functions and proportionate 

to the national security purpose on which the agencies rely. They also impose associated 
restrictions (such as using the least intrusive mechanism possible) and reinforce restrictions 
imposed by the Act and other statutes. 





*86 Intelligence and Security Act 2017, sections 17(a)-(d). 
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The summary at the start of the Ministerial Policy Statement on obtaining and using publicly 
available information provides an indication of its contents and how Ministerial Policy 
Statements generally are expressed: 


It is lawful for the Government Communications Security Bureau (GCSB) and the 

New Zealand Security Intelligence Service (NZSIS) to obtain and use publicly available 
information. This ministerial policy statement (MPS) provides guidance on the conduct 

of this activity. In making decisions related to obtaining and using publicly available 
information, GCSB and NZSIS must have regard to the following principles: respect for 
privacy, necessity, proportionality, least intrusive means, respect for freedom of expression, 
including the right to advocate, protest or dissent, legality and oversight. This MPS also 
specifies certain matters to be included in internal policies and procedures."”” 


Under section 18(b) of the Act, there is a requirement to ensure that: 


... any Co-operation with foreign jurisdictions and international organisations in the 
performance of any of the agency’s functions is in accordance with New Zealand law and all 
human rights obligations recognised by New Zealand law. 


The practical implications of this section are fleshed out in a Ministerial Policy Statement. 


Under section 19, the exercise of the right of freedom of expression (including “the right to 
advocate, protest or dissent”) “does not of itself justify an intelligence and security agency 
taking any action”. A broadly similar version of the provision was first introduced in the 
New Zealand Security Intelligence Service Act 1969 in 1977."*° The scope and meaning of 
the provision has never been subject to judicial explanation."*® We discuss the implication 
of this section in relation to target discovery below (see 14.10 Other issues, difficulties and 
uncertainties with the Act). 


Subject to these constraints, the agencies can carry out any lawful activity, providing it is 
carried out in the performance or exercise of any function, duty or power.'%° 





"87 Christopher Finlayson Obtaining and using publicly available information (September 2017) at page 1. 
188 See the New Zealand Security Intelligence Service Amendment Act 1977, section 3. 


189 Section 3 of the 1977 Act was mentioned in Choudry v Attorney-General HC Christchurch CP15/98, 19 August 1998 at page 31. 
See also Andrew Geddis and Elana Geddis “Addressing terrorism in New Zealand’s low threatscape” in | Cram (ed) Extremism, 
Free Speech and Counter-Terrorism Law and Policy (Routledge, Abindgon: UK, 2019) 190 at page 204, which was finalised before 
15 March 2019. 


"9° Intelligence and Security Act 2017, section 48. 


569 


> 
wn 
wn 
© 
wn 
en 
> 
oa 
ct 
=i 
O 
oO 
° 
(= 
a 
= 
2 
x 
ot 
© 
3 
So 
= 
3 
© 
=R 
o 
a 





30 


w 
w 


14.6 The provisions of the Act dealing with the collection 
of intelligence 


As discussed above, the Intelligence and Security Act imposes a number of limitations on 
agencies’ activities that are not illegal. It also, however, confers powers on agencies which 
are specific to them, in particular: 


a) the use of assumed identities; 

b) requests for information; 

c) direct access to certain databases held by other Public sector agencies; 
d) access to restricted information; 

e) business records directions; and 


f) collection of intelligence as authorised by warrant. 


The use of assumed identities 


Sections 21-45 authorise and regulate the adoption of assumed identities by agency 
employees™ and the use of entities to enable an agency to conduct transactions while 
maintaining secrecy.’ 


Requests for information 


Section 121 provides for requests for information by the Directors-General of the intelligence 
and security agencies to “any other agency”.* Such a request can be made where the 
Director-General of one of the agencies believes, on reasonable grounds, that the information 
is necessary to perform its functions. 


Section 122 applies to the agency that holds the information requested. An agency can 
provide the information requested if it chooses to and it believes, on reasonable grounds, 
that the disclosure of the information is necessary for the intelligence and security agency to 
perform its functions. To assist with the requested agency’s decision, the Director-General 
of an intelligence and security agency can certify that the disclosure of the information is 
necessary for the agency to perform its functions." 





"9" Intelligence and Security Act 2017, sections 21-32. 
19? Intelligence and Security Act 2017, sections 33-44. 


193 Agency means “any person, whether in the public sector or the private sector” and “includes a department and an 
interdepartmental venture”. See Intelligence and Security Act 2017, section 118. 


"94 Intelligence and Security Act 2017, section 122(3). 


570 


34 


A request and certificate do not override any legal impediment to disclosure (such as 
contractual obligation).'° And compliance with these requests is voluntary. So even in 
the absence of a legal impediment, the requested agency is not legally required to provide 
information to an intelligence and security agency. 


Data access 


Sections 124-133 deal with the provision of direct access to databases storing “specified 
public sector information”. Schedule 2 of the Act sets out which of the two intelligence and 
security agencies can negotiate direct access agreements with identified holding agencies. 


Table 13: Direct access agreements provided for by the Intelligence and Security Act 


Intelligence and 
security agency 


Government 
Communications 
Security Bureau and 
New Zealand Security 
Intelligence Service 


Information-holding 
agency 


Registrar-General 
who administers 

the Births, Deaths, 
Marriages and 
Relationships 
Registration Act 1995 


Information 


Information about 
births, civil unions, 
deaths, marriages 
and name changes 


Does a direct access 
agreement exist? 


No for Government 
Communications 
Security Bureau 


Yes for New Zealand 
Security Intelligence 
Service 





Government 
Communications 
Security Bureau and 
New Zealand Security 
Intelligence Service 


Secretary of 
Internal Affairs 
(chief executive of 
the Department of 
Internal Affairs) 


Citizenship 
information 


No 





Government 
Communications 
Security Bureau and 
New Zealand Security 
Intelligence Service 








Ministry of Business, 
Innovation and 
Employment 





Information collected 
in connection with 
the performance 

or exercise of a 
function, duty or 
power under the 
Immigration Act 
2009 





No for Government 
Communications 
Security Bureau 


Yes (in part) for 
New Zealand Security 
Intelligence Service® 











195 Intelligence and Security Act 2017, section 122(4). 


196 Under its direct access agreement with the Ministry of Business, Innovation and Employment, the New Zealand Security 
Intelligence Service has access to Advanced Passenger Processing information. The information allowed to be shared under 
the Intelligence and Security Act is broader than this. 
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Intelligence and 
security agency 


Government 
Communications 
Security Bureau and 
New Zealand Security 
Intelligence Service 


Information-holding 
agency 


New Zealand 
Customs Service 


Information 


Information about 
border-crossing 
persons, goods 
and craft that has 
been collected in 
connection with 
the performance or 
exercise of a duty 
or power under the 
Customs and Excise 
Act 1996 


Does a direct access 
agreement exist? 


No for Government 
Communications 
Security Bureau 


Yes for New Zealand 
Security Intelligence 
Service 








Government New Zealand Police _ Financial intelligence No 
Communications information 

Security Bureau and 

New Zealand Security 

Intelligence Service 

New Zealand Security New Zealand Police — Information about No 


Intelligence Service 











people and locations 
identified as posing 

a possible physical 
threat to Government 
Communications 
Security Bureau and 
New Zealand Security 
Intelligence Service 
employees 








Direct access agreements are made between the ministers of the relevant intelligence and 
security agency and the agency that holds the information. Consultation with the Privacy 
Commissioner and Inspector-General of Intelligence and Security is required (see Part 8, 
chapter 9). Limited progress has been made in finalising the direct access agreements 
envisaged in the Act (see 14.10 Other issues, difficulties and uncertainties with the Act). 


572 





28 


40 


Al 


Access to restricted information 


Restricted information encompasses confidential tax information, information about 
national student numbers, adoption information and photographic images used for driver’s 
licences.'9” 


The Director-General of an intelligence and security agency seeking access to 

restricted information must have the permission of the responsible minister and the 
Chief Commissioner of Warrants if the person concerned is a New Zealand citizen or 
permanent resident. If the person is not a New Zealand citizen or permanent resident, 
the responsible minister’s permission is required." If permission is granted, the agency 
holding the restricted information must provide it to the relevant Director-General.'°9 


Business records directions 


Sections 143-155 provide for the intelligence and security agencies to obtain business records 
of telecommunications network operators and financial service providers. Business records 
include all information generated or received in the course of the organisation’s business but 
excludes the content of communications.” 


Once the Director-General of an agency is granted approval?” from the responsible minister 
and a Commissioner of Intelligence Warrants to obtain business records, they can issue a 
business records direction. A direction issued under section 150 is restricted to specified 
business records (or a specified class of business records relating to an identifiable person 
or thing). For these purposes, “thing” includes an address (for example, an IP address).?” 
There is a statutory obligation to comply with a business records direction. 


Warrants 


Under section 49(1), an intelligence and security agency needs a warrant to carry out 

any activity that would otherwise be unlawful, that is, it would be unlawful but for the 
authorisation.*°? There is a similar requirement that applies if a New Zealand intelligence and 
security agency asks an international partner to carry out activity outside New Zealand that 
would be unlawful if it was carried out in New Zealand.?™ This applies even if the activity is 
lawful in the international partner country’s jurisdiction. 





"97 Intelligence and Security Act 2017, section 135. 

198 Intelligence and Security Act 2017, section 136. 

199 Intelligence and Security Act 2017, section 141. 

?°°See the definition of “business records” in section 144. 

01 An application for approval is made under section 145 and approval is made under section 147. 
2°? Intelligence and Security Act 2017, section 150(4)(b). 

°°3 Intelligence and Security Act 2017, section 49(1). 


204 Intelligence and Security Act 2017, section 49(2). 
gi y 
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Section 49 complements section 17, which imposes a general obligation on the agencies 
to act lawfully. An activity that is authorised under the Act is lawful even if it is contrary to 
other legislation.” 


The Act provides for different types of warrants.?°° The most relevant type are intelligence 
warrants, which are provided for by sections 52-78 of the Act.” Sections 53 and 54 provide 
for two types of intelligence warrant - Type 1 and Type 2: 


53 Type intelligence warrant 


A Type 1 intelligence warrant authorises an intelligence and security agency to carry 
out an otherwise unlawful activity for the purpose of collecting information about, or 
to do any other thing directly in relation to, — 


(a) any person who is— 
(i) a New Zealand citizen; or 
(ii) a permanent resident of New Zealand; or 
(b) aclass of persons that includes a person who is— 
(i) a New Zealand citizen; or 
(ii) a permanent resident of New Zealand. 
54 Type 2 intelligence warrant 


A Type 2 intelligence warrant authorises an intelligence and security agency to carry 
out an otherwise unlawful activity for the purpose of collecting information, or to do 
any other thing, in circumstances where a Type 1 warrant is not required. 


Type 1 warrants apply to New Zealand citizens and permanent residents. Type 2 warrants 
apply to people who are not New Zealand citizens or permanent residents. The difference 
between the two types of warrant was inherited from the Government Communications 
Security Bureau Act 2003, which was replaced by the Intelligence and Security Act. 
Section 14 of the Government Communications Security Bureau Act placed restrictions on 
the interception of communications of New Zealand citizens and permanent residents. 





?°5 Intelligence and Security Act 2017, section 49(3). 
206 See the definition of “authorisation” in section 47. 


°°7 Sections 71-76 provide for the urgent issue of warrants and section 78 provides for very urgent authorisations to be granted 
where there is insufficient time to obtain a warrant. 
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Type 1 warrants are considered and issued by the responsible minister (or ministers) and a 
Commissioner of Intelligence Warrants. Type 2 warrants are considered by the responsible 
minister alone.*°? And, as noted above, the current practice of the Inspector-General of 
Intelligence and Security is to review every warrant obtained by the agencies. This creates 
“triple-lock” protection for Type1 warrants and “double-lock” protection for Type 2 warrants. 


The preconditions to the issue of warrants are provided for in sections 58 and 59 (for Type 
1 warrants) and section 6o (for Type 2 warrants). As well, section 61 (for Type 1 and Type 2 
warrants) provides: 


61 Additional criteria for issue of intelligence warrant 
The additional criteria for the issue of an intelligence warrant ... are that— 


(a) the carrying out of the otherwise unlawful activity (a proposed activity) by an 
intelligence and security agency is necessary to enable the agency to perform a 
function under section 10 or 11; and 


(b) the proposed activity is proportionate to the purpose for which it is to be carried 
out; and 


(c) the purpose of the warrant cannot reasonably be achieved by a less intrusive 
means; and 


(d) there are satisfactory arrangements in place to ensure that— 


(i) nothing will be done in reliance on the intelligence warrant beyond what is 
necessary and reasonable for the proper performance of the function under 
section 10 or 11; and 


(ii) all reasonably practicable steps will be taken to minimise the impact of the 
proposed activity on any members of the public; and 


(iii) any information obtained in reliance on the intelligence warrant will be 
retained, used, and disclosed only in accordance with this Act or any other 
enactment. 


Section 61, amongst other things, thus creates a necessary and proportionate test that must 
be satisfied before a warrant can be issued. This test is not detailed further in the statute. 


Where a Type 1 warrant is sought for counter-terrorism purposes, the agency must 
establish that the activity “is necessary to contribute to the protection of national security” 
and “identifies, enables the assessment of, or protects against ... terrorism or violent 
extremism”.?°9 





208 Intelligence and Security Act 2017, section 60. 


209 Intelligence and Security Act 2017, section 58(1)(a)(i), (ii) and (2)(a). 
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The preconditions for the issue of a Type 2 warrant appear less exacting. Where sucha 
warrant is sought for counter-terrorism purposes, the applicant need only show that the 
activity for which authorisation is sought “is necessary to contribute to national security” 
and the activity is not in respect of a person (or class of persons) for which a Type 1 warrant 
is required. There is no explicit requirement to show that the activity “identifies, enables the 
assessment of, or protects against ... terrorism or violent extremism”. 


This may be a distinction without a practical difference in the context of counter-terrorism. 
The need to show that the activity is “necessary to contribute to the protection of national 
security””’° and the necessary and proportionate requirement under section 61 mean that the 
information required to support an application for a Type 2 warrant is practically the same as 
for a Type1 warrant. In respect of counter-terrorism, it is open to question whether there is 
a continuing need for, or utility in, the distinction between the two types of warrant, at least 
as to the criteria to be applied. 


Section 56 provides for the Directors-General of both agencies to apply for a joint intelligence 
warrant. No such application has ever been made. That said, the agencies cooperate to 
some extent, using each other’s warrants (under section 51 requests to assist) and sharing 
intelligence. 


Section 67(1) sets out the actions that can be authorised under an intelligence warrant: 


67 Authorised activities 


(1) An intelligence warrant may authorise the carrying out of 1 or more of the following 
activities that would otherwise be unlawful: 


(a) conducting surveillance in respect of 1 or more— 

(i) persons or classes of persons: 

(ii) places or classes of places: 

(iii) things or classes of things: 
(b) intercepting any private communications or classes of private communications: 
(c) searching 1 or more— 

(i) places or classes of places: 


(ii) things or classes of things: 





9 Intelligence and Security Act 2017, section 60(3)(a)(i). 
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(d) seizing— 
(i) 10f more communications or classes of communications: 
(ii) information or 1 or more classes of information: 
(iii) 1 or more things or classes of things: 


(e) requesting the government of, or an entity in, another jurisdiction to carry out 
an activity that, if carried out by an intelligence and security agency, would be 
an unlawful activity: 


(f) taking any action to protect a covert collection capability: 


(g) any human intelligence activity to be carried out for the purpose of collecting 
intelligence, not being an activity that— 


(i) involves the use or threat of violence against a person; or 


(ii) perverts, or attempts to pervert, the course of justice. 


Sections 68 and 69 provide for the actions that the agencies can carry out to give effect to 
an intelligence warrant. They confer powers to: 


a) enter any place, vehicle or thing as authorised by the warrant along with associated 
powers of search; 


b) install, use and maintain visual surveillance, tracking and interception devices; 
c) access information infrastructures; and 


d) conceal activities associated with the exercise of a warrant. 


Unauthorised, irrelevant and incidentally obtained information 


Sections 102-104 deal how information can be used if that information was obtained: 


a) outside the scope of an authorisation or authorised activity (called “unauthorised 
information”); or 


b) within the scope of an authorised activity but which is not, or is no longer, required 
by the agency for the purposes of its functions (called “irrelevant information”). 
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Unauthorised information should be destroyed unless a warrant is obtained authorising 
the collection of the information or the information can be disclosed under section 104 

to New Zealand Police, the New Zealand Defence Force or another public authority 

(in New Zealand or overseas).”" Information can be disclosed under section 104 to prevent 
or detect serious crime or mitigate threats to life or the security or defence of New Zealand 
or any other country.” 


Irrelevant information should be destroyed (see 14.10 Other issues, difficulties and 
uncertainties with the Act). 


14.7 The limited statutory mandate of the Department of the 
Prime Minister and Cabinet 


Sections 233 and 234 set out the functions of the Chief Executive of the Department of the 
Prime Minister and Cabinet in respect of intelligence collection, analysis and assessment. 
Relevantly, section 233(1) and (2) provide: 


(1) The Chief Executive of the [Department of the Prime Minister and Cabinet] is 
responsible for the performance of the following functions: 


(a) providing intelligence assessments on events and developments of significance 
to New Zealand’s national security, international relations and well-being, and 
economic well-being to— 


(i) Ministers; and 
(ii) departments; and 


(iii) any other person who the Chief Executive of the [Department of the 
Prime Minister and Cabinet] considers appropriate; and 


(b) advising Ministers on the setting of priorities for intelligence collection and 
analysis; and 


(c) advising departments on best practice in relation to the assessment of 
intelligence. 


(2) However, the Chief Executive of the [Department of the Prime Minister and Cabinet] 
must not carry out the functions specified in subsection (1)(a) and (c) personally but 
must designate an employee of the [Department of the Prime Minister and Cabinet] 
to carry out those functions. 





*" Intelligence and Security Act 2017, section 102(2). 
* Intelligence and Security Act 2017, section 104(3). 


3 Intelligence and Security Act 2017, section 103. 
8 y 
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This section provides the legislative underpinning for the operation of the National 
Assessments Bureau (see Part 8, chapter 4) and the role of the Department of the 
Prime Minister and Cabinet in the development of National Security and Intelligence 
Priorities. 


In relation to the functions prescribed by section 233, the Act imposes a duty under 
section 234 on the Chief Executive of the Department of the Prime Minister and Cabinet 
to act independently. 


14.8 The extent to which the Act authorises bulk collection and 
acquisition of data 


What is bulk collection and acquisition? 


In the aftermath of the Snowden revelations (see Part 8, chapter 2), there has been 
substantial debate, in New Zealand and elsewhere, about the appropriateness of intelligence 
and security agencies being able to collect directly (“collection”) or obtain from third 

parties (“acquisition”) large quantities of data (which may include, but is not confined to, 
communications). In this context, “bulk” is usually used in contrast to “targeted”. 


The key feature of bulk collection and acquisition is that a large proportion of the data 
gathered relates to people who are not intelligence targets and is of no intelligence value. 

At its most narrow, targeted collection and acquisition may be directed at a single individual, 
but it may also extend to groups of people or organisations who share a common purpose. 
Such collection and acquisition is sometimes referred to as “thematic”. 


The language of all of this is very imprecise. Thematic collection and acquisition may 

occur on a scale that results in the capture of data that is predominantly of no or limited 
intelligence value. Even with far more targeted collection and acquisition there is often a 
possibility of acquiring irrelevant data. And likewise, bulk collection will always be targeted 
to some extent. 


These concepts are discussed in detail by Lord Anderson of Ipswich KBE QC in the 2016 
Report of the Bulk Powers Review and, in the New Zealand context, in a 2018 report by 

the Inspector-General of Intelligence and Security, Complaints arising from reports of the 
Government Communications Security Bureau intelligence activity in relation to the South 
Pacific, 2009-2015." As the latter report indicates, the Government Communications 
Security Bureau does not use the expression “bulk collection”. It is likewise a concept that is 
not referred to specifically in the Act. 





"4 David Anderson Report of the Bulk Powers Review (August 2016); Office of the Inspector-General of Intelligence and Security 
Complaints arising from reports of Government Communications Security Bureau intelligence activity in relation to the South 
Pacific, 2009-2015 (July 2018). 
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Bulk data can play an important part in identifying, understanding and averting threats. 
Where alternative methods exist, they are often less effective, more dangerous, more 
resource-intensive, more intrusive or slower. The Report of the Bulk Powers Review notes: 


[W]hile intelligence agencies in the UK and elsewhere have access to more communications 
data than ever before, by using focused queries and data filters, intelligence analysts only 
need to retrieve and analyse a small fraction of the overall dataset. As with Google, having 
more data improves the quality of your results. Intelligence analysts can get the data they 
need comparatively quickly and efficiently." 


This was not to reject the importance of targeted collection. On the contrary, “analysis of 
bulk communications data and focused data collection on ‘targets of interest’ serve different 
but complementary purposes”. 


Bulk collection may involve, but is not confined to, interception of all communications 
(including associated metadata) as they pass between certain communication links (or 
bearers). The communications collected will be filtered so as to remove communications 
that are unlikely to be of intelligence value, with what is left subject to queries (selectors) 
producing a body of data that is able to be examined (with the balance discarded). 
Collection of this kind, in which the data obtained is stored before being filtered, has been 
referred to within the Government Communications Security Bureau as “full take”. A variant 
of this process involves the use of selectors at the point of, and just after, interception but 
before storage. 


Other countries rely heavily on this method of intelligence collection. In the United Kingdom 
just under half of all Government Communications Headquarters intelligence reporting is 
based on data obtained under bulk interception warrants. For counter-terrorism intelligence 
reporting, this figure rises to over half.”” 


Intelligence and security agencies may wish to acquire data that has been collected or 
generated by other agencies, financial service providers and telecommunication network 
operators. Such acquisition may be in bulk or alternatively targeted at a particular individual 
or group of individuals. 





8 David Anderson, footnote 214 above at paragraph 3.75, page 67. 
216 David Anderson, footnote 214 above at paragraph 3.75, page 67. 


"7 David Anderson, footnote 214 above at paragraph 5.9, page 82. 
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The Cullen-Reddy Report 


The 2016 Cullen-Reddy Report recommended the introduction of “purpose-based warrants”: 


While we recommend providing for purpose-based authorisations in appropriate 
circumstances, the legislation should contain a presumption in favour of targeted 
authorisations. The Attorney-General, and the judicial commissioner in the case of tier 1 
authorisations, would only be able to issue a purpose-based authorisation where 

satisfied it is necessary and proportionate in the circumstances, and that the outcome 
sought could not reasonably be achieved through the use of targeted authorisations. 

The Attorney-General could also impose restrictions and conditions on authorisations. 

This would help to avoid the proliferation of overly broad authorisations, while still allowing 
the Agencies sufficient flexibility to perform their functions effectively.” 


Given the context of the part of the Report in which this recommendation was made 
(including mention of then proposed United Kingdom legislation providing for bulk 
collection), this recommendation appears to have contemplated authorisation of similar 
collection by New Zealand agencies. 


The Intelligence and Security Bill (158-1) 


Clause 64 of the Intelligence and Security Bill (158-1) provided for purpose-based warrants 
- that is, warrants “for a purpose specified in the warrant and for reasons specified in the 
warrant” that did not describe “the persons in respect of whom, or the places at which, 

the activities will be undertaken”. This clause, however, did not survive the Parliamentary 
process. The advice of the Department of the Prime Minister and Cabinet on this clause was 
in these terms: 


[The Department of the Prime Minister and Cabinet] has worked with the [Government 
Communications Security Bureau] and the [New Zealand Security Intelligence Service] to 
test operational examples. The agencies are of the view that, as the Bill is framed, they can 
achieve the operational ends sought through regular class-based warrants. As such, there 
is no operational justification for retaining provision for purpose-based warrants. 


We note also the submissions which allege purpose-based warrants were a means to 
“mass surveillance.” We remain of the view that purpose-based warrants could not 
authorise mass surveillance - purpose-based warrants were included on the same basis 
they were recommended by the independent reviewers.” 





18 Hon Sir Michael Cullen KNZM and Dame Patsy Reddy DNZM, footnote 38 above at page 107. 


"9 Department of the Prime Minister and Cabinet New Zealand Intelligence and Security Bill: Departmental Report to the Foreign 
Affairs, Defence and Trade Committee from Department of the Prime Minister and Cabinet (December 2016) at pages 568-569. 
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The rationale for dropping clause 64, as explained by the Select Committee, was: 


We received advice from officials that Type 1 and Type 2 warrants can meet the agencies’ 
operational needs without the need for purpose-based warrants. The regular warrants also 
provide more safeguards, greater legal certainty, and more effective oversight. Therefore, 
we see no operational justification for retaining the provision for purpose-based warrants, 
and we recommend deleting clause 64.”°° 


Bulk collection under the Act 


Activities that, under section 67, can be authorised by an intelligence warrant include 
collection focused on “persons or classes of person,” “places or classes of places” and 
“things or classes of things”. If construed literally, this language is sufficiently broad to cover 
bulk collection. Indeed, one of the reasons why the purpose-based warrant proposal did not 
proceed was the availability of class warrants. 


The primary constraint on obtaining warrants authorising bulk collection is the necessary and 
proportionate requirement, which must be applied in the context of the Act. This context 
encompasses the absence of explicit bulk collection powers - in contrast to those provided 
for in the Investigatory Powers Act 2016 (United Kingdom) - and the legislative history that 
indicates a distinct unwillingness to contemplate anything smacking of mass surveillance. 
And, as we will explain, the Inspector-General of Intelligence and Security’s position has been 
that “general warrants” are not appropriate. 


The application of the necessary and proportionate requirement will depend on the 
intelligence purpose on which the agencies rely. If the purpose is broad, for example to 
enable an intelligence and security agency to obtain an understanding of a new phenomenon, 
collection on a broad basis may be necessary and proportionate. If, on the other hand, 

the purpose is to identify potential terrorists and thus link data and communications to 
identifiable individuals, broad collection may be more difficult to justify. 


Bulk acquisition under the Act 


On the face of it, the direct access sharing provisions (sections 124-133) appear to 
contemplate bulk data acquisition. However, the Government Communications Security 
Bureau uses the direct access agreements primarily to ascertain whether a person is a 

New Zealander. For the New Zealand Security Intelligence Service, direct access agreements 
are used to obtain useful information, but not in the form of bulk data acquisition. So, in 
practice, the direct access agreements do not provide a mechanism for the agencies to 
engage in bulk acquisition. 





2° Intelligence and Security Bill 2016 (158-2) (select committee report) at page 6. 


582 


79 


80 


81 


The business records direction regime under sections 143-155 does not provide for bulk 
acquisition as a business records direction must relate to an identifiable person or thing. 
Likewise, sections 121-122, which provide for intelligence and security agencies to request 
other agencies to provide information, do not contemplate bulk collection. That this is so is 
apparent from the report of the Inspector-General of Intelligence and Security titled 2016-17 
Review of NZSIS requests made without warrants to financial service providers: Report.” 


14.9 The relationships between the Inspector-General of 
Intelligence and Security and the agencies 


We heard that the intelligence and security agencies have cultures of compliance. For 
instance, an internal operational review of the New Zealand Security Intelligence Service that 
was substantially completed, but not finalised, before 15 March 2019 noted a “widespread 
perception” amongst operational staff that “leadership messaging was dominated by the 
importance of compliance (and the perils of non-compliance), to the exclusion of operational 
ambition”. The report noted that this perception had been tempered by a speech made by 
the Director-General of Security in February 2019, but went on to Say: 


Operational teams were not confident in their judgements on procedure (or policy, or 
principles), as they believed that they had reassured oversight on certain compliance 
matters, but subsequent written reports had painted a bleaker picture of their compliance. 


These conclusions had been accepted, and not contested by, [the New Zealand Security 
Intelligence Service], thereby emphasising the sense of uncertainty among operational 
decision-makers. 


It would not have been a productive use of our time to investigate all areas of dispute 
between the agencies and the Inspector-General of Intelligence and Security with a view 

to determining whether the leadership teams of the agencies had appropriately pushed 
back against any adverse views. They certainly did on some occasions. And some issues of 
contention were referred to the Solicitor-General for determination. 


The Inspector-General of Intelligence and Security’s views are not presumptively 
authoritative, and the agencies are not obliged to act in accordance with findings and 
recommendations. The agencies are, however, acutely aware of their limited social licence 
and take adverse reports (which might detract from that social licence) very seriously. 


The Inspector-General of Intelligence and Security is the primary oversight body of the 
agencies. A degree of tension is, therefore, both expected and necessary. The independence 
of the Inspector-General of Intelligence and Security from the agencies is critical to the 

social licence (limited as it is) that the agencies currently have. This independence might be 
compromised by close and proactive engagement with agencies. 





*2! Office of the Inspector-General of Intelligence and Security 2016-17 Review of NZSIS requests made without warrants to financial 
service providers: Report (November 2078). 
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All of that said, our discussion with the agencies and the current Inspector-General of 
Intelligence and Security suggests that there are issues - for instance in relation to warrants 
for target discovery purposes - where misconceptions have arisen that could be resolved 
by closer engagement. Such engagement would enable points on which there is substantial 
agreement to be resolved. It would also facilitate issues on which there is disagreement 

to be identified quickly, rather than more painfully in after-the-fact adverse reports. If 
necessary, disputes as to such issues could be settled authoritatively and promptly by the 
Solicitor-General. 


14.10 Other issues, difficulties and uncertainties with the Act 
We have identified further issues with the Act as it affects the counter-terrorism effort: 


a) Alack of congruence between the Act and the structure and operation of the 
New Zealand Intelligence Community. 


b) The application of the necessary and proportionate test to actions that do not require 
authorisation. 


c) Direct access agreements having not been put in place as contemplated by Parliament. 
d) Specificity requirements for warrants. 


e) Type 2 warrants and the incidental collection of information about New Zealand citizens 
and permanent residents. 


f) Absence of a legal requirement to enable activity authorised by a warrant. 
g) Searches of existing holdings. 
h) Accessing existing holdings of partner agencies. 


i) The possible effect of section 19 in limiting target discovery in respect of right-wing 
extremism. 


j) The operation of section 103. 


k) The definition of “employee”. 


A lack of congruence between the Act and the structure and operation of the 
New Zealand Intelligence Community 


The Act operates primarily to regulate and authorise the activities of the agencies and a more 
accurate short title might have been “The Intelligence and Security Agencies Act”. It says 
very little about the Department of the Prime Minister and Cabinet. There is, for instance, 

no explicit mention of the National Assessments Bureau (albeit that function is covered 

by section 233(1)(a)) and no substantial underpinning in the Act of the leadership and 
coordination role of the Department of the Prime and Cabinet (see Part 8, chapter 3). 
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The result of the lack of legislative guidance is that there is a dissonance between the role 
the Department of the Prime Minister and Cabinet has in the counter-terrorism effort and the 
very limited role identified in the Act. 


The application of the necessary and proportionate test to actions that do not require an 
authorisation 


As we have explained, a necessary and proportionate test applies to the issue of warrants. 
This test is applied when a warrant application is considered and thus ahead of any action 
taken. Agencies can, therefore, take comfort in the fact that the conduct has already been 
deemed to be necessary and proportionate. In turn, agencies are not required to turn their 
minds to this test again (unless they wish to engage in activities that fall outside the scope of 
the original warrant). 


By way of contrast, there is no prior approval mechanism for activities that are lawful. 
Therefore, an operation that relies on (or largely relies on) lawful activities will need to be 
assessed for necessity and proportionality as it progresses. This is because actions that 
an agency wishes to carry out which are lawful are practically required to be confined to 
what may later have to be justified to the Inspector-General of Intelligence and Security as 
necessary and proportionate. Such a process may prove to be cumbersome, particularly if 
there are time constraints. 


We discussed with staff of the counter-terrorism agencies whether and how they would 
have investigated the Facebook posts made by the individual under the username 

Barry Harry Tarry, if they had come to their attention (see Part 6, chapter 4). An issue 

was raised whether inquiries at the individual’s gym would have met the necessary and 
proportionate test. Such inquiries may have resulted in the gym manager and/or other gym 
members learning that a particular member was a person of national security interest. 
There were concerns whether, on the material assumed to have been at hand, that 
consequence could have been justified as proportionate. 


Direct access agreements having not been put in place as contemplated by Parliament 


The New Zealand Security Intelligence Service has entered into only a limited number of the 
types of direct access agreements that are permitted under the Act. 


There are considerations of principle and practicability that mean that an agreement 
between the relevant intelligence and security agency and the other agency is a practical 
prerequisite to an effective data sharing arrangement. So it is difficult to see any alternative 
to a structure broadly along the lines of that presently provided for in the Act. That said, 
progress towards the finalisation of direct access agreements has been limited. There are 
currently no mechanisms to encourage other agencies to enter into such agreements. 


Adding a statutory requirement to report on progress might assist with speeding up these 
processes. 
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Specificity requirements for warrants 


The rationale of intelligence warrants is to enable the collection of information that is of 
utility to the agencies in the performance of their functions under the Intelligence and 
Security Act. Associated with this, the activities that may be authorised by an intelligence 
warrant are expressed in section 67 in general terms, for instance surveillance on “persons 


0 66 


or classes or persons”, “places or classes of places” and “things or classes of things”. 


There is no evidential threshold in the Act comparable to the criminal law concepts of 
reasonable grounds to suspect or believe, provided for in the Search and Surveillance Act 
2012.” These usually apply to the investigation of offending that has been, or is being, 
committed. Instead, under the Intelligence and Security Act, agencies must show that: 


a) “the activity is necessary to contribute to the protection of national security” (for Type 1 
and 2 warrants); 


b) “the activity identifies, enables the assessment of, or protects against ... terrorism or 
violent extremism” (for Type 1 warrants); and 


c) the necessary and proportionate test is satisfied. 


Although some intelligence warrants are about the activity of identified individuals and 
specific suspicions about their activities (and in these respects have some similarities to 
warrants under the Search and Surveillance Act), others are thematic in character. 


The Inspector-General of Intelligence and Security has taken the view that, when a warrant 
proposes to target a class of people, it “must be tolerably clear who will fall within the 

class and who will not”. What this means in practice is that where a Government 
Communications Security Bureau warrant authorises an activity that targets a class of people 
that is “so wide or loose” that it is “impossible to tell with any certainty who falls within it”, 
the Inspector-General of Intelligence and Security will likely find the warrant to be irregular.?*4 
The Government Communications Security Bureau now sets out in warrant applications, with 
as much specificity as possible, those who fall within the scope of the proposed activity and 
therefore can be targeted.” 





*?? A “reasonable grounds to suspect” criterion does feature in section 59(2) of the Act in relation to warrants relating to the 
“economic well-being” of New Zealand. 


*?3 Office of the Inspector-General of Intelligence and Security Warrants Issued under the Intelligence and Security Act 2017: Report 
(December 2018) at page 109. 


°4 Office of the Inspector-General of Intelligence and Security, footnote 223 above at page 115. 


*25 Office of the Inspector-General of Intelligence and Security, footnote 223 above at pages 117 and 119. 
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There has also been dispute between the Government Communications Security Bureau and 
the Inspector-General of Intelligence and Security about what approach should be taken 
to whether a warrant authorising activity directed towards a class of persons authorises 
collection activity against a particular target. The Government Communications Security 
Bureau has taken the view that where a warrant authorises activity against a person or 
class of people, it may target an individual if it reasonably suspects that the individual is a 
member of that class.” The Inspector-General of Intelligence and Security is of the view 
that, in those circumstances, the Government Communications Security Bureau must have 
a reasonable belief that those intended to be targeted are within the class.”” In individual 
instances, this dispute must be determined against the definition of the target class in 

the warrant. And, as the Inspector-General of Intelligence and Security has recognised, 

a warrant could define a class by reference to reasonable suspicion, that is “persons 
reasonably suspected of x”. 


In practice, the approach has largely followed the interpretation of the Inspector-General 
of Intelligence and Security. That is, the targeting of individuals (whether specifically or 

as members of a class) requires reasonable grounds to believe that they are engaging in 
relevant conduct (such as terrorism) or - but only if the warrant is expressed so as to allow 
this specifically - at least reasonable cause to suspect that they are. 


Despite this issue being largely resolved, another issue has emerged. The agencies told us 
that the Inspector-General of Intelligence and Security is of the view that - at least for Type1 
warrants issued under section 58 - there is a “strict” necessity threshold requiring positive 
grounds for suspecting a New Zealander’s association with the listed harms, below which the 
agencies cannot obtain a warrant. The agencies told us that they disagreed with this view. 

In their opinion, section 58 contemplates an activity that “identifies, enables the assessment 
of, or protects against” any of the listed harms. That threshold, they said, is all that the 
Intelligence and Security Act requires in terms of authorising target discovery activities 

(see Part 8, chapter 10). 


Our impression is that either the agencies have misunderstood the position of the 
Inspector-General of Intelligence and Security or it has not been conveyed to them clearly. 
The Inspector-General of Intelligence and Security accepts that, providing agencies meet the 
statutory requirements in section 58, there is no impediment to the authorisation of target 
discovery activities. Misunderstandings would be less likely if there was more direct and 
proactive engagement - particularly involving operational staff from the agencies - along the 
lines we have earlier indicated. 





226 Office of the Inspector-General of Intelligence and Security, footnote 223 above at page 144. 


7 Office of the Inspector-General of Intelligence and Security, footnote 223 above at pages 145. 
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Type 2 warrants and the incidental collection of information about New Zealand citizens 
and permanent residents 


There is scope for argument about whether a Type 1 warrant is required where the purpose 
of a proposed activity is not directed at New Zealand citizens or permanent residents but 
the collection of information about New Zealand citizens or permanent residents is a likely, 
probable or inevitable consequence of carrying out the activity.” 


The distinction between Type 1 and Type 2 warrants, in some instances, complicates online 
intelligence gathering where nationality can be difficult to determine or where the scale of 
collection makes it inevitable that New Zealanders’ information will be collected. 


One option is for the agencies to apply for a Type 1 warrant where there is a likelihood of 
information about a New Zealander being collected. Another option is to apply for a Type 2 
warrant and, where information is collected about a New Zealander, subsequently apply for 
a Type 1 warrant. Additionally, in some circumstances, given the different requirements of 
sections 58-60, agencies may be required to apply for three different warrants to cover the 
same investigation. Requiring the agencies to apply for multiple different warrants for the 
same investigation imposes considerable administrative burdens. 


The current distinction between Type 1 and Type 2 warrants rests on the view that 

New Zealanders should be afforded greater protection from surveillance by New Zealand 
agencies than foreign nationals. This is why a Commissioner of Intelligence Warrants must 
approve Type 1 warrants rather than just the responsible minister (thereby providing an 
additional “lock”). It does not, however, explain why the criteria for the issue of warrants for 
counter-terrorism purposes should be differently expressed. Given the practical difficulties 
that the distinction causes, it may be more straightforward to provide for a single category 
of warrant, at least for counter-terrorism. 


Absence of a legal requirement to enable activity authorised by a warrant 


Although section 51 provides for an intelligence and security agency to request the assistance 
of New Zealand Police (or other people) to give effect to an authorisation, there is no 

legal duty on those affected by a warrant to comply with it (unless the requested agency 

is a network operator or service provider as they have a duty to assist the agencies under 
section 24 of the Telecommunications (Interception Capability and Security) Act 2013). 


This is of limited practical effect when the activity authorised is to be carried out in a covert 
way. It can, however, be of considerable significance where the activity cannot be carried 
out without the cooperation of a third party. 





228 See Office of the Inspector-General of Intelligence and Security, footnote 223 above at pages 136-142. 
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Searches of existing holdings 


Where information has been collected under a Type 2 warrant, current practice is that it 
will not be searched for information relating to a New Zealand citizen or permanent resident 
without a Type 1 warrant being held or obtained. 


Accessing existing holdings of partner agencies 


Section 49(2) provides that an intelligence and security agency requires an authorisation 
before asking a partner agency to carry out an activity that would be unlawful if carried out 
directly by the New Zealand agency. What is not clear is whether a warrant is required to 
access information already collected by a partner agency. 


It is at least arguable that a warrant is required in these circumstances. A request to a 
partner agency to search its existing holdings may amount to a search for the purposes of 
section 21 of the New Zealand Bill of Rights Act 1990. 


The possible effect of section 19 in limiting target discovery in respect of right-wing 
extremism 


As we noted earlier, section 19 is based on a provision first introduced in 1977 into the 
New Zealand Security Intelligence Service Act 1969. Clause 22 of the New Zealand 
Intelligence and Security Bill (158-1) was intended to replicate the gist of this part of the 
1969 Act: 


(a) Nothing in this Act limits the right of persons to engage in lawful advocacy, protest, or 
dissent in respect of any matter. 


(b) The exercise of the right in subsection (1) does not, of itself, justify an intelligence and 
security agency collecting intelligence on any person who is in New Zealand or any class 
of persons who are in New Zealand. 


The Inspector-General of Intelligence and Security submitted on clause 22 in this way: 


Section 2(2) of [the New Zealand Security Intelligence Service Act 1969] provides that the 
[New Zealand Security Intelligence Service] is not justified in “instituting surveillance”, 
while clause 22 states that the intelligence and security agencies will not be justified in 
“collecting intelligence”. The [Inspector-General of Intelligence and Security] is concerned 
the protection in clause 22 is narrower because “collecting intelligence” could be construed 
as being limited to collection of intelligence pursuant to an intelligence warrant, whereas 
“instituting surveillance” could encompass observation undertaken legally without a 
warrant. The [Inspector-General of Intelligence and Security] considers that lawful 
advocacy, protest and dissent do not in themselves justify the agencies taking any action 
at all, and that the Bill should be reworded to capture this. 
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The Department of the Prime Minister and Cabinet agreed with the Inspector-General 
of Intelligence and Security’s submission and recommended that the words “collecting 
intelligence” be replaced with “taking any action”. As will be apparent, this change is 
reflected in the wording of section 19. 


The wording of section 19 gives rise to some difficulties in terms of target discovery. We can 
illustrate these difficulties by reference to the possible monitoring of far right websites and 
forums. Bearing on the appropriateness of such monitoring are fact that: 


a) anumber of people, including those on the far right, use websites and online forums to 
spread (or receive) divisive hateful rhetoric; and 


b) some of those people may be potential terrorists and analysis of what is said on those 
websites and forums might enable them to be identified; but 


c) very little of what is found on such websites and forums (including the divisive and 
hateful rhetoric) is contrary to the law. 


Collection and analysis of what is said on those websites and forums can be regarded as 
involving agency action directed at a group of people targeted because of their exercise of 
the right to freedom of expression. It is at least open to argument that such collection and 
analysis would be in breach of section 19. If so, we would not see the problem as able to be 
resolved by obtaining a warrant, given what we consider to be the purpose of section 19, its 
legislative history and the effect of other provisions in the Act. 


A practical example of the issues that may arise is provided by the IP address lead discussed 
in Part 6: What Public sector agencies knew about the terrorist. A major reason why the 
lead was generated and pursued is that the person using the internet address had accessed 
extremist material. It is far from clear that, in doing so, that person committed an offence. 
If accessing the material did not amount to an offence, it follows that such access was within 
the scope of the right to freedom of expression (which encompasses seeking out the opinions 
of others). There were other elements to the internet activity (relating to firearms) that were 
material to the decision to open and pursue the lead. This probably means that the exercise 
of the right to freedom of expression - that is, accessing extremist material - was not “of 
itself” the basis for the action that was taken. On the other hand, upstream collection of 
intelligence about who is accessing what internet material is an activity in itself and one that 
could engage section 19. 
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There should be proactive engagement between the agencies and the Inspector-General of 
Intelligence and Security as to the implications of section 19 on target discovery. But such 
engagement, while likely to be useful, will not authoritatively resolve the potential for major 
problems with section 19 in the current environment. Difficult though the issues around 
section 19 will be to resolve legislatively, we see them as warranting urgent consideration 
by Parliament. 


The operation of section 103 


Section 103(1) and (2) provides: 


103 Destruction of irrelevant information 
(1) In this section, irrelevant information means information that— 


(a) is obtained by an intelligence and security agency within the scope of an 
authorised activity; but 


(b) is not required, or is no longer required, by the agency for the performance 
of its functions. 


(2) Irrelevant information must be destroyed as soon as practicable. 


Section 103 assumes that relevance and irrelevance are binary concepts - that intelligence 
is either relevant to the performance of the agencies’ functions (in which case it may be 
retained) or that is irrelevant (in which case it must be deleted). It also assumes that the 
agencies are in a position to continuously monitor the relevance of information that they 
hold. Neither assumption is correct. Relevance is a relative concept. The agencies do not 
have the practical ability to operate a continuous review of the relevance of all information 
that they hold. And, even if they did, devoting the limited resources of the agencies to such 
a task may impact their ability to carry out more important functions, such as identifying 
potential terrorists. 


Section 103 should be reviewed. 


The definition of “employee” 


The powers of the agencies to give effect to intelligence warrants may be exercised by 
authorised employees (see sections 68 and 69). The section 4 definition of “employee” 
does not encompass officials from other agencies seconded to the agencies (including from 
another intelligence agency). There are number such persons who, in a practical sense, 
work for the agencies. There is a work-around (involving the use of section 51) but it would 
be preferable if the definition of “employee” reflected the way in which the agencies are, in 
practice, staffed. 


591 


> 
wn 
wn 
© 
wn 
en 
> 
oa 
ct 
soa 
@ 
Oo 
° 
(= 
a 
et 
2 
x 
ct 
@ 
3 
So 
= 
3 
© 
= 
o 
+ 





aS 


—[—_——) 


Chapter 15: Evaluation of the 
counter-terrorism effort 


15.1 Overview 


Three of the questions on which we were required by our Terms of Reference to make findings 
were applicable to the counter-terrorism effort: 


4(c) whether relevant [Public] sector agencies failed to anticipate or plan for the 
terrorist attack due to an inappropriate concentration of counter-terrorism resources 
or priorities on other terrorism threats; 


(d) whether any relevant [Public] sector agency failed to meet required standards or was 
otherwise at fault, whether in whole or in part; and 


(e) any other matters relevant to the purpose of the inquiry, to the extent necessary to 
provide a complete report. 


Underlying these issues is a concern that the relevant Public sector agencies may have 
missed opportunities to disrupt the 15 March 2019 terrorist attack by, for instance, looking 
the wrong way. We interpreted these paragraphs as asking, primarily at least, whether the 
relevant Public sector agencies were at fault in relation to the terrorist attack. 


We were required to make recommendations about how the counter-terrorism effort could be 
improved. These recommendations did not need to be tied to (or based on) findings under 
our Terms of Reference. On the other hand, we would not recommend improvements unless 
we had concluded that there is scope for improvement. In the case of the counter-terrorism 
effort, these conclusions are closely related to, and follow on from, our findings. It is logical 
therefore to examine in this chapter whether there are elements of the counter-terrorism 
effort that need improvement. 


In this chapter we: 


a) assess whether relevant Public sector agencies failed to anticipate or plan for the 
terrorist attack due to an inappropriate concentration of counter-terrorism resources or 
priorities on other terrorism threats; 


b) assess whether any relevant Public sector agency failed to meet required standards or 
was otherwise at fault, whether in whole or in part; 


c) consider whether any other findings are necessary to provide a complete report on other 
matters relevant to the purpose of the inquiry; and 


d) describe the elements of the counter-terrorism effort that we consider warrant 
improvement. 
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15.2 Did relevant Public sector agencies fail to anticipate 
or plan for the terrorist attack due to an inappropriate 
concentration of counter-terrorism resources or priorities 
on other terrorism threats? 


The issue on which a finding is required 


In some respects, the question we must answer is narrow: 


a) Wewere not asked to address whether the resources allocated to the counter-terrorism 
effort were sufficient. We have not looked at allocations between agency work 
programmes (such as New Zealand Police’s counter-terrorism and, say, family violence 
prevention efforts). We have focused on the counter-terrorism resources of relevant 
Public sector agencies as they were at the relevant time. 


b) The expression “plan for or anticipate the attack” specifically refers to the terrorist attack 
carried out on 15 March 2019. Had the relevant Public sector agencies planned for or 
anticipated that terrorist attack, they would have been able to disrupt it. So we see the 
question as directed at whether the concentration of counter-terrorism resources was 
material to the terrorist attack not being disrupted. 


But although narrow in the respects just mentioned, the question requires assessment of 
the allocation of resources between competing priorities and necessitates consideration of 
multiple factors involving different choices across various domains and, for those reasons, 
is polycentric. To such a question, a simple “yes” or “no” answer may not be possible. 


We have not treated the “resources” and “priorities” as raising separate issues. Instead, 
we see them as expressing a single idea. In this chapter we use the terminology of 
concentration of counter-terrorism resources. 


We focus primarily, although not exclusively, on the period between 2016 and 15 March 2019. 
2016 is a sensible starting point for the following reasons: 


a) Up until late 2014 there had been New Zealand Police assessments of the extreme 
right-wing. Although these assessments primarily focused on threats to public order 
and offending, they did cover national security concerns. The last of these assessments, 
in late 2014, noted that the far right in New Zealand was characterised by “discord and 
discoordination” and that experienced far right activists were unlikely to pose a risk to 
national security over the next three years. 


b) In 2015-2016 there was a sharp increase in far right activity internationally, which we see 
as relevant to whether the Public sector agencies involved in the counter-terrorism effort 
should have turned their attention towards the threat of extreme right-wing terrorism. 
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c) 2016 is when the Strategic Capability and Resourcing Review funding was approved 
(see Part 8, chapter 2). Before that funding becoming available, the New Zealand 
Security Intelligence Service’s capabilities and capacity had degraded so severely that 
it would be a pointless exercise for us to review its resource allocation decisions. 


We address the discussion that follows under the following headings: 
a) The available counter-terrorism resources. 


b) The concentration of counter-terrorism resources on the threat of Islamist extremist 
terrorism. 


c) The reasons for the concentration of resources on the threat of Islamist extremist 
terrorism. 


d) The risk of right-wing extremist terrorism as discernible before 15 March 2019. 
e) What the counter-terrorism effort did about the risk of right-wing extremist terrorism. 


f) Did the concentration of resources on the threat of Islamist extremist terrorism 
materially increase the overall risk of terrorism? 


g) Was the concentration of resources on the threat of Islamist terrorism a considered 
decision following an appropriate process? 


h) Would any plausible alternative allocation of counter-terrorism resources have resulted 
in anticipation or planning for the terrorist attack? 


i) Our conclusions. 


The available counter-terrorism resources 


As discussed in this Part, a number of Public sector agencies contribute to the 
counter-terrorism effort. 


For the purposes of this exercise, we leave the following to one side: 


a) The Government Communications Security Bureau. It had only four staff in 2016, two in 
2017 and seven in 2018 who were assigned to domestic counter-terrorism. It engaged in 
counter-terrorism only when specifically tasked by another agency to do so, and had not 
received any tasking relevant to the issue. It therefore had comparatively little to do with 
the allocation of counter-terrorism resources. 


b) The counter-terrorism unit in New Zealand Customs Service and Immigration 
New Zealand. The individual did not present as a threat at the border and there is no 
reason to think that any different focus of counter-terrorism resources at the border 
would have resulted in disruption of his planning. 
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c) The Specialist Coordinator and other staff in the National Security Group of the 
Department of the Prime Minister and Cabinet. 


Recognising, as we do, that precise delineation of relevant counter-terrorism resources 

is a little artificial, we think that what is most relevant for the purposes of our finding are 
the counter-terrorism investigative resources within the New Zealand Security Intelligence 
Service’s Counter-Terrorism Unit and New Zealand Police’s National Security Investigation 
Team. These resources were scarce. As of 2016, the resources of the New Zealand Security 
Intelligence Service were insufficient to provide for more than partial monitoring of its 
investigative prioritisation (watch) list targets (see Part 8, chapter 5). The specialist 
counter-terrorism staff of New Zealand Police were also under pressure. A 2016 budget 

bid for an increase in New Zealand Police’s counter-terrorism funding had been rejected. 


The numbers of specialised counter-terrorism staff in the New Zealand Security Intelligence 
Service and New Zealand Police were supplemented by their supervisors. As well, the 
Counter-Terrorism Unit in the New Zealand Security Intelligence Service could call on the 
assistance of other staff (for instance collections staff). New Zealand Police’s National 
Security Investigation Team could call on the broader resources of New Zealand Police, 
including the Security Intelligence and Threats Group, as and when required (and as the 
priorities of those other staff allowed) although members of that Team were also sometimes 
called upon for other New Zealand Police purposes. 


Also relevant, but in a different way, are the National Assessments Bureau and the Combined 
Threat Assessment Group. The way these assessment agencies viewed their respective 
roles, and the focus of their efforts, influenced the allocation of domestic counter-terrorism 
resources within the counter-terrorism agencies. 


The concentration of counter-terrorism resources on the threat of Islamist extremist 
terrorism 


Counter-terrorism resources were primarily concentrated on the threat of Islamist extremist 
terrorism. This can be demonstrated by the New Zealand Security Intelligence Service’s 
priority investigation (watch) list. As at 11 March 2019, it included 25 counter-terrorism 
investigations involving 32 subjects of investigation. All these subjects were under 
investigation due to their assessed affiliation with Islamist extremism, primarily inspired 

by Da’ish. 
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The reasons for the concentration of resources on the threat of Islamist terrorism 


There are several interconnected reasons why counter-terrorism resources were 
concentrated on the threat of Islamist extremist terrorism: 


a) Assessments of the Combined Threat Assessment Group and the National Assessments 
Bureau were primarily focused on Islamist extremist terrorism threats. 


b) Before 2015, New Zealand Police had produced assessments on far right individuals and 
groups in New Zealand but from 2015 the New Zealand Police intelligence function had 
degraded to the point that it was not producing assessments on the far right. 


c) International partner reporting and leads were overwhelmingly focused on Islamist 
extremism. 


d) Islamist extremist terrorism was seen as the presenting threat. 
e) There was Limited availability of counter-terrorism resources. 
We discuss each of these in turn. 


From 2010-2019 the intelligence assessments of the National Assessments Bureau and the 
Combined Threat Assessment Group considered the terrorist threat to New Zealand and 
New Zealanders as coming largely from Islamist extremism. For example, in July 2015 the 
Combined Threat Assessment Group assessed that the primary domestic terrorism threat 
was from “individuals and groups, based in New Zealand but with inspiration from abroad, 
who subscribe to extreme Islamist ideologies”. It did not explicitly mention the threat of 
terrorism from the extreme right-wing. 


From 2016 onwards, assessments continued to evaluate Islamist extremism as the primary 
terrorist threat to New Zealand and New Zealanders. For example: 


a) In 2016, a New Zealand Police intelligence report, New Zealand's Islamist Extremist 
Landscape, stated that more New Zealanders are vulnerable to extremist messaging 
due to the pervasive nature of Da’ish’s propaganda, which had proven more effective at 
attracting disaffected young males than other extremist groups. 


b) The Combined Threat Assessment Group’s 2018 assessment of the New Zealand terrorism 
environment stated that “in spite of ongoing losses in Syria and Iraq, [Da’ish] will 
continue to exert itself as a terrorist and insurgent group with international influence 
and reach ... the overall level of support for [Da’ish] among New Zealand-based Islamist 
extremists does not seem to have changed markedly ... though the manifestation of 
support for radical Islam continues to evolve”. 
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c) The New Zealand Security Intelligence Service similarly concluded in 2018 that “[Da’ish’s] 
territorial decline has not had any marked impact on the New Zealand extremist 
environment”. 


d) Two papers produced by the National Assessments Bureau in 2018 discussed the 
“persistent threat from Jihadist terrorism”. 


As of 2016, New Zealand Police’s national intelligence function had degraded and no longer 
produced strategic assessments on the domestic threatscape (see Part 8, chapter 6). 


International partner reporting was overwhelmingly focused on Islamist extremism. 

The Government Communications Security Bureau informed us that in the second quarter 

of the 2018-2019 financial year, it received 7,526 intelligence reports from international 
partners about terrorism and violent extremism. None of those reports related to right- 
wing extremism. While international partners do not direct or dictate that New Zealand 
agencies pursue particular leads or ideologies, partner reporting and partner-supplied leads 
necessarily informed the development of New Zealand threat assessments and affected the 
allocation of resources, certainly by the counter-terrorism agencies. 


Leads received from within New Zealand by counter-terrorism agencies were predominantly 
about possible Islamist extremist terrorism. A New Zealand Security Intelligence Service 
report of 5 September 2018 noted an absence of indications of terrorist threats from 
non-Islamist extremist sources. In part this may have resulted from the leads-based 
investigative model employed by New Zealand Security Intelligence Service which, because 
of its focus on Islamist extremism, was not calibrated so as to generate leads associated with 
other ideologies (see Part 8, chapter 10). 


There were many tangible leads and a substantial number of persons of interest with an 
Islamist extremist outlook. As well, there were numerous active domestic investigations and 
operations focused on Islamist extremist activity that posed real threats to public safety in 
New Zealand. We have seen evidence that New Zealand Police and the New Zealand Security 
Intelligence Service achieved some success in mitigating such threats. For example, between 
August 2015 and January 2018, eight passports were cancelled, and New Zealand Police 
arrested 17 individuals of national security interest for a variety of offences and issued 

40-50 warnings for extremism-related objectionable material. 


The primary explanation given by the counter-terrorism agencies for not making earlier 
efforts to understand the threat of extreme right-wing terrorism is that their limited resources 
were substantially tied up dealing with the presenting threat of Islamist extremist terrorism. 
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From at least early 2016, it was appreciated by the New Zealand Security Intelligence Service 
there was a potential for terrorism from non-Islamist extremist sources and that it was largely 
unsighted to the nature and extent of such threats. This is referred to in a February 2016 
Strategic Capability and Resourcing Review Cabinet paper, which identified the expected 
capacity increase in relation to countering violent extremism: 


The capability increases from a current state where partial monitoring of watch-list targets 
is possible and there is minimal coverage outside Auckland, to a future where there is a 
New Zealand-wide baseline threat picture. 


Baselining emerging terrorist threats was ranked as the third goal in the New Zealand Security 
Intelligence Service’s 2016 10-Year Operational Strategy,” but its ranking meant that work 
on it was deferred. As events turned out, the New Zealand Security Intelligence Service did 
not have enough counter-terrorism staff to start its baselining project until May 2018. 


The threat of right-wing extremist terrorism as discernible before 15 March 2019 


What has become apparent after the terrorist attack has shown that, before 15 March 2019, 
there were national security threats from right-wing extremists, at least some of which would 
have been be likely to have come to light if the concentration of counter-terrorism resources 
had been different. We know this because some of the new extreme right-wing leads that 
were opened after 15 March 2019 (as a result of the counter-terrorism agencies reviewing 
their existing holdings and through public or partner reporting) met the threshold for 
investigation. This deserves a brief explanation. 


On 10 June 2019, the New Zealand Security Intelligence Service’s watch list included 

28 counter-terrorism investigations involving 46 subjects of interest. Twenty-four of the 
investigations (involving 30 subjects of interest) related to Islamist extremism. The remaining 
four investigations (involving 16 subjects of interest) involved right-wing extremism. On 

31 January 2020 the watch list included 34 counter-terrorism investigations, comprising 

47 subjects of investigation. Of these, 20 investigations (involving 31 subjects of interest) 
related to Islamist extremism, while 14 investigations (involving 16 subjects of interest) 
involved right-wing extremism. These can be compared to the corresponding figures at 

11 March 2019, discussed above and shown in the figure below. 





9 New Zealand Security Intelligence Service, footnote 55 above. 
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Figure 47: Number of subjects of interest in New Zealand Security Intelligence Service 
counter-terrorism investigations, by associated ideology (March 2019-January 2020) 
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© Islamist extremism Right-wing extremism 


What all this means is that, before 15 March 2019, there was activity in New Zealand involving 
individuals with extreme right-wing ideologies who were of national security interest. This is 
not surprising. 


Before 15 March 2019, there had been many extreme right-wing terrorist attacks in Canada, 
the United Kingdom and the United States of America, which showed that ideological 
thinking along the lines of the Great Replacement had the capacity to motivate some people 
to extreme violence. Right-wing extremist terrorism was exemplified by the Oslo terrorist’s 
attack in 2011, several mass shootings at places of worship in Europe and North America 
between 2012-2018 and a planned extreme right-wing attack in Australia that was disrupted 
in 2016 (see Part 8, chapter 2). In short, global events showed that right-wing extremism 
was a known phenomenon, with substantial potential lethality, was not confined to a single 
jurisdiction, had been around for a number of years and fed off a number of drivers to which 
New Zealand could not claim to be immune (including racism, IsLamophobia, poverty, 
growing inequality, the radicalising role of the internet and immigration). 


The Australian Security Intelligence Organisation recently confirmed that right-wing 
violence now occupies 30 to 40 percent of its counter-terrorism cases, up from 10 to 
15 percent in 2016.”° 





73°Maani Truu “Threats from far-right extremists take up between 30 per cent and 4o per cent of ASIO’s resources, up from only 
15 per cent half a decade ago” SBS News (Australia 22 September 2020) https://www.sbs.com.au/news/threats-from-far-right- 
extremists-have-skyrocketed-in-australia-with-asio-comparing-tactics-to-is. 
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Right-wing groups have been active in New Zealand for many decades. Associated with this 
have been at least three hate crime murders (committed by members of the Fourth Reich, 

a right-wing gang). And while other right-wing groups have been seen primarily as posing 
threats to public order, the underlying thinking of their supporters meant that they would be 
receptive to the ethno-nationalist ideas (see Part 2, chapter 5), that were starting to achieve 
considerable global currency by 2015-2016. 


Although cultural controversies involving immigration have not been as acute in New Zealand 
as in some other Western countries, there were several issues in New Zealand that had 

the potential to galvanise those on the extreme right-wing. These included provocative 
statements made by some in public life about race relations, Te Tiriti o Waitangi and the 
nature of Islam. As well, as survey data shows, New Zealanders generally feel “less warmth” 
towards Muslim communities than other groups.” 


Members of Muslim communities were concerned about risks of right-wing extremist 
terrorism. We have discussed the detail of this in Part 3: What communities told us and 
Part 9: Social cohesion and embracing diversity. As expressed, these concerns tended to 
be closely associated with worries about discrimination, Islamophobia, hate speech and 
hate crime and often did not clearly relate to national security. Nonetheless they reflected 
community concerns that warranted attention and reassurance from counter-terrorism 
agencies, or other relevant Public sector agencies, if that could be provided legitimately. 


The easy availability of firearms of high lethality was recognised in the 1997 Thorp Report.” 
In 2011 the Combined Threat Assessment Group concluded that a terrorist could legally 
acquire firearms for use in an attack (see Part 8, chapter 4). In 2014, a New Zealand Police 
assessment commented on the propensity of the extreme right-wing to acquire and use 
firearms. 


The counter-terrorism effort and right-wing extremist terrorism 


The threat posed by the extreme right-wing in New Zealand was briefly mentioned in some 
assessments (see Part 8, chapter 4). 


Before 2015, New Zealand Police had produced assessments on far right individuals and 
groups in New Zealand. Although these were primarily about threats these individuals 
posed to public order or general offending, national security concerns were addressed in 
two assessments in 2014. One of these assessments noted that right-wing extremists were 
unlikely to pose a risk to national security over the next three years. 





3" Chris G Sibley, M Usman Afzali, Nicole Satherley, Anastasia Ejova, Samantha Stronge, Kumar Yogeeswaran, Michael Grimshaw, 
Diala Hawi, Zahra Mirnajafi, Fiona Kate Barlow, Petar Milojev, Lara M Greaves, Sarah Kapeli, Elena Zubielevitch, Logan Hamley, 
Maria C Basabas, Marvin H Wu, Chloe Howard, Carol HJ Lee, Yanshu Huang, Christopher Lockhart, Joaquin Bahamondes, Sam 
Manuela, Taciano L Milfont, Ryan Perry, Nikhil K Sengupta, Nickola C Overall, John H Shaver, Geoffrey Troughton, Danny Osborne 
and Joseph Bulbulia Prejudice toward Muslims in New Zealand: Insights from the New Zealand Attitudes and Values Study 
(July 2020). 

?8? Sir Thomas Thorp KNZM Review of Firearms Control in New Zealand: Report of an Independent Inquiry Commissioned by the 
Minister of Police (Thorp Report) (Government Printer, June 1997). 
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In January 2018 the Combined Threat Assessment Group’s New Zealand Terrorism 
Threatscape noted that: 


Open source reporting indicates the popularity of far right ideology has risen in the West 
since the early 2000s. Since 2014, the ‘new’ right-wing movements have been strengthened 
by opposition to refugee settlements and Islamist extremist attacks in the West, especially 
in Europe and Scandinavia. 


[The Combined Threat Assessment Group] has not sighted any reporting to indicate 
[established New Zealand far right groups have] the intent or capability to promote 
their ideology by an act of terrorism. As has been evidenced in similar jurisdictions to 
New Zealand, an extreme right-wing lone actor attack remains a possibility, albeit a 
remote one. 


We also note that Islamist extremist attacks in other Western countries have provoked 
retaliatory attacks from individuals with other ideologies, such as extreme right-wing 
groups. [The Combined Threat Assessment Group] assesses that this could occur in 
New Zealand following any terrorism incident. 


During the first half of 2018 (before the New Zealand Security Intelligence Service started its 
project to establish a baseline picture of emerging domestic terrorism threats), there were 
several Combined Threat Assessment Group briefing notes that referred to the threat of 
extreme right-wing terrorism in similar but more limited terms. 


The National Assessments Bureau’s first comment on the terrorist threat from the extreme 
right-wing in New Zealand was in September 2018 in its Global Terrorism Update. |In an annex 
to the main assessment is a small section on “extreme right terrorism” in which the National 
Assessments Bureau observed that “between 12 September 2001 and 31 December 2016 in 
the United States of America, there were more extreme-right incidents than Islamist terrorist 
incidents resulting in fatalities”. It concluded that there had been an emerging global threat 
from extreme right-wing terrorism for some time, but groups were fragmented with limited 
international coordination. The assessment went on to note that: 


Extreme-right-wing groups are present in New Zealand and have an online presence, but 
have not been active. Extreme-right groups differ from far right groups in the fact that the 
extreme-right is willing to use terrorism to further their aims. There has been no evidence to 
suggest New Zealand-based far right groups have the intent or capability to promote their 
ideology by an act of terrorism. 
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We have seen a few reports and assessments prepared by Public sector agencies including 
the Department of Corrections and New Zealand Customs Service that refer to the extreme 
right-wing as a possible (but unsighted) domestic threat, with the potential for violence. 

A New Zealand Police national security situation update in May 2018 specifically noted that 
Muslim communities in New Zealand could be the target of such threats. 


Leads on the extreme right-wing were received occasionally and, when received, were 
pursued. These include the IP address lead, which we have discussed in some detail in 
Part 6, chapter 3. 


New Zealand Customs Service and New Zealand Police had developed some limited training 
material for front-line staff that was focused on the extreme right-wing (see chapter 17 of 
this Part). 


The New Zealand Security Intelligence Service produced one report in 2011 that referred to 
the national security threat from the extreme right-wing. It produced several more such 
reports in 2018. No reports were published in the intervening period (2012-2017). 


New Zealand Police and the New Zealand Security Intelligence Service held a tabletop 
exercise in October 2018 to increase understanding of their respective processes and 
procedures in Response to a counter-terrorism incident. One of the scenarios drew on 
the Finsbury Park Mosque terrorist attack. The scenario played out the Response that 
Public sector agencies would take to a report of a lone actor vehicle terrorist attack on 
worshippers leaving the Masjid an-Nur in Christchurch (see Part 8, chapter 4). 


Although we have recorded what may appear to be a good deal of activity, the reality is that 
counter-terrorism resources were primarily concentrated on the threat of Islamist extremist 
terrorism. 


The 2019 Arotake Review noted: 


[The New Zealand Security Intelligence Service’s] work on the extreme-right-wing in 

New Zealand remained at its early stages at the time of the 15 March 2019 attacks. After 

a long period without focus on this complex area, [the New Zealand Security Intelligence 
Service] was seeking to develop an understanding of the key ideologies, groups, individuals 
involved, their propensity to violence, and operational techniques, despite being only able 
to devote limited resources committed to the task. 


We agree with this judgement. As far as the New Zealand Security Intelligence Service 

was concerned, there was a developing but still limited understanding of the threat of 
right-wing extremism in New Zealand as at 15 March 2019. Broadly similar considerations 
apply to New Zealand Police, whose work on right-wing extremism had only just started by 
15 March 2019. 
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Did the concentration of resources on the threat of Islamist extremist terrorism 
materially increase the overall risk of terrorism? 


An increased concentration of counter-terrorism resources on the extreme right-wing was 
not likely to have materially increased the likelihood of the individual’s preparation being 
disrupted. We explain why later in this chapter. 


If the counter-terrorism agencies’ scarce counter-terrorism resources had, earlier than 

May 2018, been diverted away from the presenting threat of Islamist extremist terrorism 
towards, say, developing a better understanding of emerging threats from other ideologies, 
there are a range of possible outcomes. It may have led to an increase in the risks associated 
with Islamist extremist terrorism, due to a reduction in the effort to mitigate those risks. 

It may also have led to a decrease in the risks of extreme right-wing terrorism, due toa 
better understanding and mitigation of the threat. Neither side of that equation can be 
precisely assessed. 


It is not possible to determine with confidence whether the overall risk of domestic terrorism 
would have been increased or decreased had counter-terrorism resources been allocated 
earlier to the threat of right-wing extremist terrorism. An attempt at such determination 
would have required detailed consideration of each of the investigation prioritisation 
(watch) list targets and the threats they presented and the extent to which diversion of effort 
would have increased the risk they posed. Also required would have been a comparable 
assessment of the extent to which the risk of extreme right-wing might have been mitigated 
by an earlier diversion of effort. 


This exercise would at best produce a very speculative conclusion, though this is not to say 
a risk management framework is not required for prospective allocation of scarce resources, 
a point which we will come back to shortly. But more significantly the exercise would have 
turned the focus of our inquiry away from the actions of Public sector agencies to one which 
includes surveillance targets within our communities. We do not see this as consistent with 
our Terms of Reference. 


Was the concentration of resources a considered decision following an 
appropriate process? 


Another way to assess the appropriateness of the concentration of counter-terrorism 
resources is to consider the process undertaken in relation to the allocation of 
counter-terrorism resources. In this approach, the concentration of counter-terrorism 
resources on threats of Islamist extremist terrorism to the substantial exclusion of other 
threats could be justified only on the basis of either: 


a) aninformed assessment of the threats of terrorism associated with other ideologies; or 


b) asystem-wide decision that, despite the absence of such an assessment, 
counter-terrorism resources should continue to be allocated almost exclusively 
to the threat of Islamist extremist terrorism. 
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In the period between 2016 and May 2018 there was not an informed assessment of the 
threats of terrorism associated with ideologies other than Islamist extremism. The only 
relevant assessments are the Combined Threat Assessment Group assessments of July 2015 
and January 2018, the relevant parts of which we have set out above. 


The Combined Threat Assessment Group’s July 2015 New Zealand Terrorism Threatscape 
assessment that Islamist extremist terrorism was the primary terrorist threat could be taken 
to imply that other threats had been assessed. As far as we can tell, this was not the case. 
And the January 2018 assessment, while accurate as far as it went (in its reference to not 
having sighted reporting), could be taken to imply more in the way of an evidence-based 
assessment than had actually been carried out. This is particularly so in relation to the 
comment that the possibility of an attack by an extreme right-wing lone actor was “remote”. 


The National Assessments Bureau’s Global Terrorism Update of September 2018 stated, 
“[t]here has been no evidence to suggest New Zealand-based far right groups have the intent 
or capability to promote their ideology by an act of terrorism”. This was literally true as there 
was, at the time, no such evidence. The statement, however, could be taken to imply that 
there had been more effort to look for such evidence than had been the case. 


It is of interest to compare these assessments with the December 2018 New Zealand 
Terrorism Update issued by the New Zealand Security Intelligence Service (see 
Part 8, chapter 4). We reproduce the key passage of the report here for ease of reference: 


Non-Islamist terrorist threats from extreme political, religious and issues-motivated 

groups are plausible in New Zealand, especially given heightened political partisanship 
internationally and the spread of disinformation online. Various radical groups are present 
in New Zealand, some of which have extreme elements that could plausibly turn violent; 
however, terrorist acts by them are currently not expected. 


The spread of highly partisan political content online, especially over social media, has 
almost certainly contributed to acts of non-Islamist extremist violence in Western countries. 
Several attempted and realised attacks in the United States in 2018 were linked to extreme 
right-wing, conspiratorial, or racist agitation in social and other media, judging from 

press reporting. 


The more general problem, as we see it, is that the two key assessment agencies 

were not well situated to provide assessments of emerging threats. In the case of the 
National Assessments Bureau, this was a result of its customer focus and its limited 
resources. In the case of the Combined Threat Assessment Group this was due to both 
its short term and tactical focus and also the negative reaction from other agencies to its 
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reporting on the 2011 Oslo terrorist’s attack and its firearms assessment of 2011 due toa 
perception it was stepping outside of its mandate. This firearms assessment had judged that 
a terrorist could legally acquire firearms (including military style semi-automatic firearms) for 
an attack and that the firearms licence vetting process would be unlikely to reliably identify a 
terrorist posing as a legitimate firearms applicant (see Part 8, chapter 4). 


The concentration of counter-terrorism resources on the threat of Islamist extremist 
terrorism was not therefore based on an informed assessment of the threats of terrorism 
from other ideologies. We now turn to consider whether there was a system-wide decision 
that, despite the absence of such an assessment, counter-terrorism resources should 
continue to be allocated almost exclusively to the threat of Islamist extremist terrorism. 


The position of the New Zealand Security Intelligence Service is that before May 2018, a 
combination of the presenting threat of Islamist extremist terrorism and its limited capacity 
meant that it did not have the resources to devote to developing an understanding of other 
threats. It also pointed out that Islamist extremism and right-wing extremism are not the 
only ideologies that can, and have, led to acts of terrorism. The New Zealand Security 
Intelligence Service suggests that a requirement to assess all possible sources of terrorism 
before allocating counter-terrorism resources would be impractical. Furthermore, and 
importantly, the way in which the New Zealand Security Intelligence Service allocated its 
resources was considered. It was foreshadowed in the February 2016 Strategic Capability 
and Resourcing Review Cabinet paper in a way that indicates government acceptance of the 
appropriateness of deferring baselining. It was also consistent with the priorities identified 
in the New Zealand Security Intelligence Service’s 2016 10-Year Operational Strategy. And 
when it had the capacity to do so in May 2018, the New Zealand Security Intelligence Service 
commenced its baselining project. 


There is some substance in these arguments. But: 


a) Aninformed assessment of the threat might have been based on an exercise less 
substantial than the baselining project that the New Zealand Security Intelligence Service 
commenced in May 2018 (itself a deliberate allocation of counter-terrorism resources) 
and permitted an informed decision as to the relative priorities of those threats. As it 
happens there was no such assessment and indeed no continuing or dynamic review of 
the threats or the priorities identified in the 2016 70-Year Operational Strategy. 


b) Our appreciation of the situation in, say, 2017 is that the threat of extreme right-wing 
terrorism and risk associated with the recognised ease with which a potential terrorist 
could obtain weapons of high lethality were more than theoretical and at least warranted 
some attention. 


c) Most importantly, we consider that a deliberate decision on the part of the New Zealand 
Security Intelligence Service to devote its counter-terrorism resources almost exclusively 
to the threat of Islamist extremist terrorism despite the absence of an assessment of 
other threats is not a substitute for a system-wide decision. 
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In the minutes of the Security and Intelligence Board and the Counter-Terrorism Coordination 
Committee, the inter-agency groups primarily responsible for coordinating New Zealand’s 
counter-terrorism efforts, there is a striking absence of specific discussion about the threat 
of right-wing extremist terrorism. There is no record that these groups explicitly recognised 
that there was a domestic terrorist threat from the extreme right-wing and that this threat 
was not well understood. 


There is a reasonable case to be made for the view that, despite the absence of explicit 
discussion, members of the Security and Intelligence Board either did know, or should have 
known, that there was a threat of right-wing extremist terrorism that the counter-terrorism 
agencies did not understand: 


a) The Strategic Capability and Resourcing Review set out capacity and capability 
constraints affecting the New Zealand Security Intelligence Service, and the 
implementation programme that followed broadly indicated how these capacity and 
capability constraints would be addressed over time. That there were threats that were 
not understood, and that no systematic effort to understand them would start until 
resources allowed, followed logically from a close reading of the associated documents. 


b) Reporting of right-wing extremist activity in other Western countries was widely 
distributed amongst the agencies represented on the Security and Intelligence Board. 
As well, its members’ knowledge of global events would likely have included the 
right-wing extremist terrorist activity that was occurring in other Western countries. 


c) It was implicit in what was said (and not said) at meetings of the Security and 
Intelligence Board and the Counter-Terrorism Coordination Committee that the focus 
of the counter-terrorism effort was on Islamist extremist terrorism and that there was 
no reference to work being carried out on any other terrorist threats. 


It may well have been stating the obvious if the New Zealand Security Intelligence 
Service or New Zealand Police had explicitly told the Security and Intelligence Board or 
Counter-Terrorism Coordination Committee that their understanding of the non-Islamist 
extremist domestic terrorist threat was very limited. As well: 


a) There were financial constraints. The Cabinet papers associated with the Strategic 
Capability and Resourcing Review programme indicated a clear government expectation 
that, in the absence of a significant change of circumstances, the agencies were not 
expected to seek further funding before 2019. A New Zealand Police budget bid in 2016 
for additional counter-terrorism resources had been rejected. 


b) The options for the counter-terrorism effort were limited. As we have explained, it 
was not obvious that reallocating scarce counter-terrorism resources away from the 
presenting threat to start the baselining project earlier would have resulted in an overall 
reduction in risk. Bringing additional counter-terrorism staff into the system was already 
underway and increasing the pace of this would have presented challenges, even if 
additional funding became available (see Part 8, chapter 5). 
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All of that said, we are of the view that there was a systemic failure to recognise that there 
was a threat of extreme right-wing domestic terrorism that was not understood. It follows 
that the allocation of counter-terrorism resources almost completely to Islamist extremist 
terrorism was not the result of a considered system-wide decision. 


New Zealand, as a small country, cannot achieve capacity and capability to operate across 
the full spectrum of risks and threats it faces. This means that assessment (and continual 
reassessment) of risks and threats to national security, and allocation of resources to match 
those risks and threats, are critical to a well-functioning national security system. One of the 
mechanisms that underpins the “all hazards, all risks” framework is that resources across 
the system will be allocated to the highest priority risks and threats. If there are capacity 

or capability limitations that prevent particular risks or threats being understood, the core 
organising principle of New Zealand’s national security system - the “all hazards, all risks” 
approach - requires those limitations to be identified. 


In 2010, Barry Charles Ezell and others in Probabilistic Risk Analysis and Terrorism Risk 
wrote that: 


... considerable efforts have been made to estimate the risks of terrorism and the cost 
effectiveness of security policies to reduce these risks. [The Department of Homeland 
Security], industry, and the academic risk analysis communities have all invested heavily 
in the development of tools and approaches that can assist decisionmakers in effectively 
allocating limited resources across the vast array of potential investments that could 
mitigate risks from terrorism and other threats.” 


This is relevant to New Zealand’s counter-terrorism effort. Although we have not been 
prepared to engage in a retrospective risk analysis of the concentration of resources on 
Islamist extremist terrorism, such analysis is required for effective resource allocation 
decisions in the future. Identification of capability and capacity limitations that may be 
preventing risks and threats being understood should be explicit. 


The members of the Security and Intelligence Board and the Counter-Terrorism Coordination 
Committee could not be expected to have had the Cabinet papers relating to the Strategic 
Capability and Resourcing Review in the forefront of their minds. And despite what may have 
been implicit in what was said (and not said), explicit recognition at meetings of the fact that 
there was a threat that was not understood would presumably have prompted discussion. 





?33 BC Ezell, SP Bennett, D von Winterfeldt, J Sokolowski and AJ Collins “Probabilistic Risk Analysis and Terrorism Risk” (2010) 30(4) 
Risk Analysis https://www.dhs.gov/xlibrary/assets/rma-risk-assessment-technical-publication. pdf. 
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Given the known capacity and capability constraints of the New Zealand Security 
Intelligence Service and its plan to remedy its poor understanding of emerging threats, such 
discussions may have led nowhere. It would, however, have been possible to ask for more 
money. Additional resources from within the New Zealand Security Intelligence Service or 
New Zealand Police might have been allocated to counter-terrorism. And the focus of the 
National Assessments Bureau and the Combined Threat Assessment Group may have been 
reconsidered. 


Across the counter-terrorism effort there remains a lack of clarity as to who holds the 
responsibility for looking across the collective effort to identify risks and gaps. As a result, 
we found it difficult to understand how the collective responsibility to detect and mitigate 
future terrorist threats could be fully exercised. 


Finally, despite what should or may have been apparent to members of the Security and 
Intelligence Board and the Counter-Terrorism Coordination Committee, ministers could 
not be expected to infer from the material they received that there was a threat of extreme 
right-wing terrorism that was not understood by the counter-terrorism agencies. And this 
was something that they were entitled to be told. 


Had they been advised of this, and of the unmitigated risk to New Zealand’s national security 
that the system was carrying, ministers would have been able to decide whether that was a 
risk they were willing to accept. Because they were not informed of this risk, they were not 
given the opportunity to act. 


The following factors contributed to this systemic failure of the counter-terrorism effort: 
a) The limited resources in the overall counter-terrorism effort. 


b) The focus of the National Assessments Bureau and the Combined Threat Assessment 
Group. 


c) The New Zealand Security Intelligence Service not highlighting with the Security and 
Intelligence Board and Counter-Terrorism Coordination Committee the risk implications 
of its operational strategy (in particular, the timing of the growth of capability and 
capacity, and deferral of the baselining project until sufficient resources were available). 


d) The members of the Security and Intelligence Board and Counter-Terrorism Coordination 
Committee not exploring what was implicit in what they had been told (and not told) - 
that the right-wing extremist threat was not well understood. 


e) New Zealand Police not highlighting with the Security and Intelligence Board and 
Counter-Terrorism Coordination Committee that their intelligence function had been 
run down, they were no longer producing assessments on the extreme right-wing and 
strategic assessments on domestic extremism, and the residual risk this carried. 


f) The reality that the system did not force or at least encourage Public sector agencies 
to discuss their individual strategies and any residual risk they were carrying and thus 
identify gaps in the system. 
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Would any plausible allocation of counter-terrorism resources have resulted in 
anticipation or planning for the terrorist attack? 


We have reviewed at length the individual’s background and his planning and preparation for 
the terrorist attack (see Part 4: The terrorist). The indicators of his planning and preparation 
that might have been noticed by the public or by the counter-terrorism agencies were 
limited. The strongest indicator was his flying a drone over Masjid an-Nur. As well, his 
internet activity using the Barry Harry Tarry username, his Trade Me username “Kiwi14words” 
and his shooting style at the Bruce Rifle Club could be seen, individually, as indicators, 
though not particularly strong ones. Further, if there had been different health reporting 
arrangements that had enabled his steroid and testosterone use and firearms injury to be 
linked to his status as the holder of a firearms licence, his fitness to hold that licence might, 
conceivably, have come into question. As it turns out, however, none of these indicators 
came to the notice of the counter-terrorism agencies. 


Had there been a threat agnostic public facing counter-terrorism strategy that 

incorporated a “see something, say something” policy, there would have been an increased 
chance of such signals being reported, perhaps the drone flying incident and possibly 

his shooting style or his use of the “Kiwi14words” username. The absence of sucha 
public-facing counter-terrorism strategy, however, is unrelated to the general concentration 
of counter-terrorism resources on Islamist extremist terrorism. 


Based on the counter-terrorism effort operating as it did before 15 March 2019, the 
individual’s detection by the counter-terrorism agencies depended on chance - that is, 

the individual deviating from his attempts at operational security, and this coming to the 
attention of relevant Public sector agencies such as New Zealand Police. We are of the view 
that detecting the individual would have depended on chance even if there had been a very 
substantial focus on right-wing extremism by the counter-terrorism agencies. 


In the absence of a “see something, say something” policy, such increased focus on 
right-wing extremism by the New Zealand counter-terrorism agencies would not have 
increased the likelihood of public reporting. It is unlikely that the counter-terrorism agencies 
would have monitored what was discussed in a private Facebook group associated with an 
Australian group. Similarly, the counter-terrorism agencies did not have the capability or 
probably the legal authority to monitor social media activity on the scale necessary to pick 
up possibly significant usernames such as “Kiwi14words”. Even if they had they done so, 

it is not easy to see how discovering that someone was using that username would have 
justified collecting the additional information that would have been needed to identify the 
individual as a national security threat. We have in mind the restrictions created by 

section 19 of the Intelligence and Security Act 2017 and the necessary and proportionate test 
(see Part 8, chapter 14). 
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Therefore, we do not see the substantial concentration of counter-terrorism resources on 
Islamist extremist terrorism in the years leading up to 15 March 2019 as having contributed to 
the individual’s planning and preparation for the terrorist attack going undetected. 


Conclusion 


We conclude that the concentration of counter-terrorism resources on the threat of Islamist 
extremist terrorism before the New Zealand Security Intelligence Service’s baselining project 
began in May 2018 was: 


a) not based on an informed assessment of the threats of terrorism associated with other 
ideologies; and 


b) did not result from a system-wide decision that, despite the absence of such an 
assessment, counter-terrorism resources should continue to be allocated almost 
exclusively to the threat of Islamist extremist terrorism. 


It was therefore inappropriate. But we also conclude the concentration of resources on the 
threat of Islamist extremist terrorism did not contribute to the individual’s planning and 
preparation not being detected. 


15.3 Did any relevant Public sector agency fail to meet required 
standards or was otherwise at fault? 


Other than in the systemic sense just identified, we see no failure to meet required standards 
in respect of the counter-terrorism effort. 


The systemic failure to recognise that there was a threat of extreme right-wing domestic 
terrorism which was not understood did not contribute to the fact that the individual’s 
planning and preparation was not detected. This is for essentially the same reasons as 
discussed above. For this reason, we do not make a finding of failure or fault against any 
of the relevant Public sector agencies in respect of the counter-terrorism effort. 


15.4 Whether other findings are necessary to provide a complete 
report on other matters relevant to the purpose of the 
inquiry? 

As we have observed, we interpreted the questions in our Terms of Reference on which 

findings were required as primarily directed to whether the relevant Public sector agencies 

were at fault in relation to the terrorist attack. Recommendations that we make must be 


based on factual assessments but these assessments do not need to be premised on formal 
findings. There is thus no requirement for further formal findings. 
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15.5 Elements of the counter-terrorism effort that need 
improvement 


A preliminary comment 


The counter-terrorism effort in New Zealand has achieved successes, as we have described. 
In doing so, the counter-terrorism agencies have shown considerable flexibility, looking to 
achieve good outcomes in ways that do not necessarily involve prosecution. This success has 
been achieved despite the limited counter-terrorism resources available and the absence of 
precursor terrorism offences in the Terrorism Suppression Act 2002 (see Part 8, chapter 13), 
which in some instances may have enabled investigations to be closed earlier than they were. 


The people engaged in the counter-terrorism effort are professional and dedicated. They 
deal with unpredictable people and are required to make decisions based on incomplete 
information. And if they get those decisions wrong, the consequences may be catastrophic. 


The concerns we have about the counter-terrorism effort are not about the professionalism 
of those working in the operational agencies. They are, rather, systemic in character. 

In this section, we set out our principal conclusions on the parts of the counter-terrorism 
effort that need improvement, on which we base our recommendations 

(see Part 10: Recommendations). 


We approach the discussion that follows under the following headings: 
a) Political and public engagement. 

b) Leadership and coordination. 

c) Strategic intelligence assessments. 

d) Role of the Government Communications Security Bureau. 

e) Information sharing. 

f) Interagency cooperation. 

g) Online capability. 

h) Legislative stewardship. 


These conclusions reflect the environment after 15 March 2019. In this environment 
lessons learned from the 15 March 2019 terrorist attack and subsequent appraisals of the 
counter-terrorism effort, including this report, can be applied. As well, constraints that 
previously limited the lines of activity that could be pursued are less significant than they 
were previously. 
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Political and public engagement 


The current Directors-General of the intelligence and security agencies have been more 
proactive with the public than their predecessors. The New Zealand Security Intelligence 
Service has an active community engagement programme, which, for example, resulted in 
more than 100 interactions between the New Zealand Security Intelligence Service staff and 
community representatives in 2018 and 2019. 


All of that said, and recognising the hard work that has been carried out, there has been 

little informed public debate about the counter-terrorism effort beyond that stimulated 

by identification of errors or embarrassment for the intelligence and security agencies or 
New Zealand Police or controversies involving proposed legislative changes. There are few 
public-facing documents explaining to New Zealanders what is done on their behalf by those 
involved in the counter-terrorism effort. Stories of counter-terrorism successes have not 
been told publicly. More generally, there has been little or no recognition of the need for, and 
efforts of, the agencies that contribute to New Zealand’s counter-terrorism effort and keeping 
New Zealanders safe. 


The events and controversies to which we referred in Part 8, chapter 2 led to an environment 
surrounding the intelligence and security agencies that was sufficiently toxic as to leave 
limited scope for useful political engagement. As well, in the situation as it was before 

15 March 2019, politically-led discussion and debate about counter-terrorism was likely to 
result in further stigmatisation of Muslim communities, along the lines of what had occurred 
following the ‘Jihadi brides” controversy. There was also a political desire not to be alarmist 
about the terrorism threat. 


The ability of the counter-terrorism agencies to talk about their successes has been severely 
constrained. In the absence of terrorist attacks, the lack of precursor terrorism offences 
meant that there were no terrorism prosecutions. This is despite the possibility that there 
may have been some prosecutions if New Zealand had legislation in place similar to that of 
the United Kingdom and Australia. The successful resolution of some investigations may have 
been jeopardised by publicity. Further, pervasive secrecy requirements are in themselves a 
serious limit on what can be said publicly. All of this has meant that there is at best limited 
public understanding of the threat of terrorism and the work that the counter-terrorism 
agencies carry out. 


The lack of informed public debate has had consequences: 


a) The social licence for the Public sector agencies involved in the counter-terrorism effort 
is limited. 


b) The public, local government, private sector and civil society do not know what 
contribution they can make to the counter-terrorism effort. 


c) Successive governments’ budget decisions have not been informed by a deep political or 
public appreciation of counter-terrorism threats and risks and the value that the relevant 
Public sector agencies do, and could, provide to public safety and national security. 
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These consequences are not theoretical. Two examples will suffice: 


a) Despite the individual’s attempts at operational security, there were a few occasions 
when he acted in ways that were noticed by the public. Primarily relevant are the 
individual flying a drone over Masjid an-Nur, and his shooting style, which was noted 
as odd by some members of the Bruce Rifle Club. If the public was more aware of the 
risk and they knew how they could contribute to the counter-terrorism effort, 
people might have reported the individual’s actions to the counter-terrorism agencies. 
We cannot know what difference such reports might have made, but the chance of the 
individual’s activities being detected would have increased. 


b) A public facing counter-terrorism strategy would include risk mitigation measures 
relating to target-hardening and managing crowded spaces. If implemented before 
15 March 2019 such measures may well have reduced the loss of life resulting from the 
terrorist attack. 


In the post-15 March 2019 environment, there should be substantially increased scope for 
informed public debate. 


The terrorist attack of 15 March 2019 changed the public perception of terrorism in 

New Zealand. It also reinforced the reality that the terrorist threat comes from a number of 
groups and ideologies. This is clear from not only the terrorist attack of 15 March 2019 but 
also what has come to light since. In this environment, a threat agnostic counter-terrorism 
strategy should be able to be presented in a way that does not stigmatise particular 
communities or unduly alarm the public. 


As we have already noted, a high-level Countering terrorism and violent extremism national 
strategy overview was published on the website of the Department of the Prime Minister and 
Cabinet in February 2020.74 This mode of publication meant that it attracted little public 
attention and it has not been promoted as an opportunity to stimulate debate. We have been 
told that the Government has been awaiting our report before implementing more activities 
in the national strategy overview’s proposed Public information action plan, including public 
messaging on how to stay safe during a terrorist attack and media engagement. We note 
that part of this, a crowded places strategy, was made public with a press release by 

New Zealand Police in September 2020 (and included on the websites of New Zealand Police, 
the Department of the Prime Minister and Cabinet, the New Zealand Security Intelligence 
Service and other Public sector agencies). 





34 Department of the Prime Minister and Cabinet, footnote 48 above. 


35 New Zealand Police press release Working together to keep crowded places safe (17 September 2020) 
https://www.police.govt.nz/news/release/working-together-keep-crowded-places-safe; New Zealand Police website 
Crowded places strategy https://www.police.govt.nz/advice-services/protecting-crowded-places-attack/crowded-places- 
strategy; Department of the Prime Minister and Cabinet website Counter-terrorism 
https://dpmc.govt.nz/our-programmes/national-security-and-intelligence/counter-terrorism; New Zealand Security Intelligence 
Service website Protecting our Crowded places (18 September 2020) https://www.nzsis.govt.nz/news/protecting-our-crowded-places/. 
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We consider that the development of a countering violent extremism and terrorism strategy 
should prompt public debate, as we hope will be the case with this report. 


Leadership and coordination 


As part of the national security system, the counter-terrorism effort is organised ona 
decentralised coordinated model (see Part 8, chapter 3). It is decentralised in that no single 
agency has overall responsibility for policy and operational effort and the counter-terrorism 
effort is spread across multiple agencies. It is coordinated, in that the agencies within the 
system proactively work together under the coordinating leadership of the Department of 
the Prime Minister and Cabinet. That leadership is not directive. The chief executives of the 
intelligence and security and law enforcement agencies have statutory responsibility for the 
performance of their individual agencies and are not under the direction or control of the 
Department of the Prime Minister and Cabinet. There is, however, a collective responsibility 
regarding national security through the Security and Intelligence Board. 


There are significant disadvantages or risks associated with this decentralised model, 
including lack of engagement, miscommunication, slow or incomplete information exchange, 
duplication of effort and the absence of a single point of accountability. There are also 
potential advantages, including absence of capture by a single agency, flexibility to innovate, 
nimbleness of individual agencies, different perspectives able to be brought to the table and 
competing ideas exposed for debate. 


Maximising the advantages and minimising the disadvantages requires leadership that: 


a) ensures that the individual agencies are interacting effectively with each other (sharing 
information, coordinating efforts, undertaking joint operations and collaborating on 
strategy) and not operating individually and in parallel; and 


b) sets an agenda that identifies and addresses gaps in the system that individual agencies 
might not see from the vantage points of their own positions within the system. 


100 This isa demanding leadership role, particularly for an agency such as the Department of the 


Prime Minister and Cabinet, which has little operational experience and limited resources. 


Where a work programme involves contributions from multiple agencies, it is usual Public 
sector management practice in New Zealand for a strategy document to be put in place to 
guide and coordinate each agency’s contribution. A good strategy document enables role 
and terminology clarification, identifies common purpose, allocates accountability and 
enables proper resource allocation. However, no such strategy was in place to guide the 
counter-terrorism effort. 
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102 Between 2014 and March 2019, the counter-terrorism effort had made some progress: 
a) Anew ministerial portfolio for national security and intelligence was created in 2014. 
b) The Specialist Coordinator for the counter-terrorism effort was appointed in 2016. 


c) The Intelligence and Security Act was passed in 2017, which reformed the intelligence 
and security agencies’ authorising environment. 


d) A National Risk Register was developed in 2018. While the Register has not yet been 
approved and published by the Government, the risk profiles are being used by officials 
to support a more strategic and proactive approach to risk management. 


e) Amore clearly defined interagency counter-terrorism work programme was progressed 
by the Security and Intelligence Board in 2018 (largely driven by the Specialist 
Coordinator). 


f) The Security and Intelligence Board approved the Counter-Terrorism Strategic Framework 
and the High-Level Framework for the Prevention of Violent Extremism in 2018. 


103. Some work streams that did not produce tangible public outcomes were affected by 
political considerations, most particularly the proposed public facing counter-terrorism 
strategy and the National Risk Report, which would have had a terrorism component. 

In the post-15 March 2019 environment, the constraints that influenced these political 
considerations may have less relevance. 


104 There was little progress in areas that needed coordination. This is illustrated by: 


a) the absence of a mature risk management framework or mechanism that would have 
resulted in system-wide recognition of potential threats to New Zealand and what actions 
would be taken to mitigate them; 
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b) alack of common understanding about leadership of the counter-terrorism effort; 


c) the delay in New Zealand Police and the New Zealand Security Intelligence Service 
cooperating on understanding the threat posed by right-wing extremism leading to 
confusion between the counter-terrorism agencies of their respective individual and 
collective roles as to right-wing extremism; 





d) the limited coordination of building online capability and capacity; and 


e) the absence of system performance standards and accepted best practice in the 
New Zealand context against which to monitor performance and measure the 
effectiveness of the system. 
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The overarching benefit of a functioning system is the development of whole-of-system 
insights on which to implement joint effort. This appears lacking. Our impression of the 
material we have seen is that the agencies represented on the Security and Intelligence Board 
were not working together to understand and provide advice on the collective insights from 
assessments or to identify and respond to gaps in the system. 


It is apparent that the counter-terrorism effort was not functioning as a national security 
system should. It was functioning as a collection of agencies, operating largely in parallel, 
with some elements of coordination but little shared direction. 


Strategic intelligence assessments 


Strategic assessments enable the counter-terrorism effort to scan the horizon to look for 
new and emerging threats. They lift the focus from today’s presenting threat and remind 
operational agencies of the need to anticipate future threats. It is an important tool for 
the effective allocation of resources, particularly where capacity or capability are limited. 
In New Zealand the Combined Threat Assessment Group and the National Assessments 
Bureau are the two agencies with responsibility for strategic assessments that support the 
counter-terrorism effort (see Part 8, chapter 4). 


As is apparent, we are of the view that the orientations of these two assessment agencies 
meant that they did not focus on emerging threats of domestic terrorism. This was 
contributed to by resource constraints. As well, there was no national assessments 
programme to coordinate the strategic assessment activities of those two agencies. 


Despite recognition since at least 2003, when the Auditor-General reported that an 

“over the horizon” function was critical to New Zealand’s national security system,”*° such 
a capability has not been developed. The counter-terrorism effort would be strengthened 
if the assessment agencies had a dedicated horizon scanning function. 


Role of the Government Communications Security Bureau 


As we have explained, the domestic counter-terrorism role of the Government 
Communications Security Bureau was very limited (see Part 8, chapter 7). Leaving aside its 
cyber security role, it operates primarily as a foreign intelligence agency and it engages in 
domestic counter-terrorism activity only when tasked by another agency. There are a number 
of reasons for this, including legacy effects of the legislative settings before the Intelligence 
and Security Act, its capabilities and its assessment as to where those capabilities are best 
directed. 


The domestic counter-terrorism effort would be strengthened if the Government 
Communications Security Bureau took a more proactive role. 





236 Office of the Controller and Auditor-General, footnote 8 at pages 39-40. 
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Information sharing 


In New Zealand’s decentralised counter-terrorism effort, sharing of information between 
Public sector agencies is critical to the effectiveness of the system (see Part 8, chapter 9). 
Well-functioning information sharing practices are particularly critical to enabling Public 
sector agencies to detect lone actor threats because, on the whole, it is less likely that lone 
actors will give detectable signals than terrorists operating within a cell or network. 


Information sharing issues are not confined to highly classified information. Public sector 
agencies are not using current legislation to the fullest extent possible to provide for the 
sharing of information that is not subject to secrecy constraints. The Intelligence and 
Security Act permits direct access agreements to be established between the intelligence 
and security agencies and other specified Public sector agencies, but few have been 
entered into. While we accept that some effort and resource is required to conclude these 
agreements, our sense is that not all agencies are prioritising this work. The Department of 
the Prime Minister and Cabinet, as sector leader, should drive this area of effort. 


There are also issues relating to highly classified information: 


a) Sharing highly classified information between intelligence and security agencies (such 
as the New Zealand Security Intelligence Service) and law enforcement agencies (such as 
New Zealand Police) is a problem in many international jurisdictions. While New Zealand 
Police and the New Zealand Security Intelligence Service have improved their information 
sharing practices over the last five years by, for example, developing an information 
sharing protocol and co-locating teams in Auckland, there are continuing concerns 
amongst operational staff, particularly in New Zealand Police. 


b) We have seen many examples of documents being over-classified. The more highly 
classified a document, the fewer people can see it. As we have noted, the volume of 
highly classified information produced by the New Zealand Security Intelligence Service 
and the Government Communications Security Bureau on domestic terrorism threats is 
relatively small. This small scale makes it possible for agencies to spend more time than 
we think they currently do on classification decisions or tearline reports. Tearlines are 
portions of an intelligence report or product that provide the substance of a more highly 
classified or controlled report without identifying sensitive sources, methods or other 
operational information. Tearlines release classified intelligence information with less 
restrictive dissemination controls, and, when possible, at a lower classification.”37 


c) The “need to know” principle could be used as an opportunity for Public sector agencies 
to think through who would benefit from receiving information, rather than as a reason 
for not sharing information. 





°37 Office of the Director of National Intelligence Intelligence Community Directive 209: Tearline Production and Dissemination 
(6 September 2012) https://fas.org/irp/dni/icd/icd-209.pdf. 
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d) Strategic intelligence assessments about terrorism threats in New Zealand are the 
culmination of a great deal of investment. They should present the most authoritative 
and complete picture of the threatscape possible. Ideally they should be classified at 
a level that permits sufficiently wide distribution to enable them to inform government 
decisions and activity. 


Other than developing practical enablers, such as improved secure information technology, 
we have not seen a coordinated effort led by the Department of the Prime Minister and 
Cabinet and the Security and Intelligence Board to focus attention on information sharing 
and to overcome barriers to sharing highly classified information with all the Public sector 
agencies whose work would benefit from receiving it. 


Interagency cooperation 


The decentralised, coordinated model that the counter-terrorism effort employs relies for 
its effectiveness on the quality of interagency cooperation. 


In the course of our inquiries we have been able to observe the level of cooperation between 
the Public sector agencies involved in the counter-terrorism effort. Our primary focus was 
the relationship between New Zealand Police and the New Zealand Security Intelligence 
Service (see Part 8, chapter 12). 


Since 2015 there has been a significant improvement in the level of cooperation between the 
counter-terrorism agencies. The two agencies have created formal interagency groups and 
committees designed to facilitate cooperation at different levels of their organisations. Some 
co-location has been piloted and found to be of value to the working relationship. 


The general philosophy has been to allow cooperation to develop organically. This involves 
relying on individuals to cooperate. Although we acknowledge significant improvement, 
this approach means that much depends on the informal understandings and arrangements 
between individuals. The system benefits could be lost with changes in personnel or a shift 
in focus. This is not a recipe for enduring success. 


We have earlier identified some issues where cooperation has not been ideal and where the 
counter-terrorism agencies have operated in parallel. We are left with the view that, for the 
future, a more structured approach to cooperation would produce better results. 
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Online capability 


A significant element of New Zealand’s counter-terrorism effort needs to be online, because 
the internet is widely recognised as having become a key platform for terrorist radicalisation 
and recruitment. Our report shows that it was on the internet that the individual developed 
and shared his extreme right-wing views, received inspiration and probably obtained 
operational information, researched firearms capability and undertook some of his 
reconnaissance. It was also the internet that enabled him to reach a worldwide audience 
with his GoPro livestream and manifesto (see Part 4: The terrorist). 


Before 15 March 2019 the online capability of New Zealand’s counter-terrorism effort was 
limited (see Part 8, chapter 11). In the aftermath of the terrorist attack, the New Zealand 
Security Intelligence Service’s online capability was assessed as “fragile”. The same was true 
of the capability of New Zealand Police. The Government Communications Security Bureau 
was not substantially involved in the counter-terrorism effort. 


In mid-2018 the Specialist Coordinator commissioned a stocktake of agencies’ online activity 
to counter extremism. This found that although there were some relevant work streams 
underway, there was not a common approach and the level of coordination between agencies 
was questionable. The stocktake was provided to the Counter-Terrorism Coordination 
Committee but no further progress had been made by 15 March 2019. 


Given the commonalities of effort between New Zealand Police and the New Zealand Security 
Intelligence Service and the complementary or additional roles and capabilities of the 
Government Communications Security Bureau and Department of Internal Affairs (in relation 
to objectionable material), coordination of the development of online capability is plainly 
sensible. Such coordination was not evident in relation to new funding approved for one 
agency to develop online capability in the 2019 Budget. 


Legislative stewardship 


Legislation is an important tool in any counter-terrorism effort. In our enquiries we focused 
on two principal statutes, the Terrorism Suppression Act (see Part 8, chapter 13) and the 
Intelligence and Security Act (see Part 8, chapter 14). 


The Terrorism Suppression Act, among other things, sets the framework for criminalising 
various types of terrorist activity. It therefore sets the point at which New Zealand Police 

can disrupt terrorist activity by arrest and prosecution. The Intelligence and Security Act 
regulates intelligence gathering by the New Zealand Security Intelligence Service and the 
Government Communications Security Bureau. For the counter-terrorism effort to be 
effective, both pieces of legislation need to keep up to date with evolving patterns of terrorist 
activity, emerging technologies, operational challenges and public expectations about the 
balance between public safety and human rights. 
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The Terrorism Suppression Act does not provide the counter-terrorism agencies with 
assistance in dealing with potential terrorists who are operating in what we have called the 
pre-criminal space - that is, they are planning and preparing for a terrorist attack but have 
not committed any offences. This issue has been addressed in the United Kingdom and 
Australia by the creation of precursor terrorist offences, which include but are not confined 
to planning and preparation for acts of terrorism. The lack of such offences in New Zealand 
has limited the ability of New Zealand Police to disrupt terrorist planning and preparation 
by arrest. As well, it imposes at least potential limitations on the ability of New Zealand 
Police to exercise powers under the Search and Surveillance Act 2012. The lack of precursor 
terrorist offences also contributed to the New Zealand Security Intelligence Service’s focus 
on monitoring known terrorist threats. Rebecca Kitteridge, Director-General of Security, 
told us that this was unsatisfactory, as it tied up resources that should be actively seeking 
out unknown threats. 


More generally, the effectiveness of the Terrorism Suppression Act has been affected by the 
lack of a review of whether it is fit for purpose. A holistic assessment of the nature of the 
risk presented by potential terrorists in the pre-criminal space is required. That assessment 
should consider the best way the risk can be mitigated with the resources that New Zealand 
is prepared to allocate to the counter-terrorism effort. 


The Intelligence and Security Act has been useful in modernising and unifying the legal 
framework within which the New Zealand Security Intelligence Service and the Government 
Communications Security Bureau operate. It will be the subject of a mandatory review 

in 2022. 


We consider that some of the difficulties with the operation of the Intelligence and Security 
Act may be able to be resolved by a different style of engagement between the intelligence 
and security agencies and the Inspector-General of Intelligence and Security (see Part 8, 
chapter 14). We have in mind here issues associated with the threshold for intelligence 
warrants on the risk of terrorism. This is particularly relevant to target discovery (Part 8, 
chapter 10). 


There are other difficulties that warrant attention in the 2022 review of the Intelligence and 
Security Act as we set out in chapter 14. We are, however, of the view that urgent attention 
should be given to section 19. 


620 


NO 


————*) 


Chapter 16: Findings 


We conclude that the concentration of counter-terrorism resources on the threat of Islamist 
extremist terrorism before the New Zealand Security Intelligence Service’s baselining project 
began in 2018 was: 


a) not based on an informed assessment of the threats of terrorism associated with other 
ideologies; and 


b) did not result from a system-wide decision that, despite the absence of such an 
assessment, counter-terrorism resources should continue to be allocated almost 
exclusively to the threat of Islamist extremist terrorism. 


It was therefore inappropriate. 


We find that the inappropriate concentration of resources on the threat of Islamist extremist 
terrorism did not contribute to the individual’s planning and preparation for his terrorist 
attack not being detected. And for that reason, the Public sector agencies involved in the 
counter-terrorism effort did not fail to anticipate or plan for the terrorist attack due to an 
inappropriate concentration of counter-terrorism resources. 


We find no Public sector agency involved in the counter-terrorism effort failed to meet 
required standards or was otherwise at fault in respects that were material to the individual’s 
planning and preparation for his terrorist attack not being detected. 
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————) 


Chapter 17: Questions asked by the community 


17.1 Right-wing extremism 


Before 15 March 2019, were Public sector agencies sufficiently aware of the threat posed 
by white supremacist and other right-wing extremist non-state actors and movements? 
If so, what did they do in response to the threat? 


Public sector agencies had some awareness of the terrorist threat posed by the extreme 
right-wing (see Part 8, chapter 4). This awareness was limited: 


The primary focus of intelligence assessments was international terrorism (particularly 
the threat to New Zealanders overseas). Those assessments on international terrorism 
primarily focused on Islamist extremist terrorism. 


In the five years or so leading up to 2018, there were few strategic assessments about 
terrorism threats in New Zealand, and practically none on threats other than Islamist 
extremism. 


The New Zealand Security Intelligence Service started its baselining project in 

May 2018. Following a meeting in December 2018 New Zealand Police took preliminary 
steps to undertake their own exercise on the extreme right-wing. As at 15 March 2019, 
the awareness of the threat posed by the extreme right-wing was developing but was 
still limited. 


In response to the threat, the counter-terrorism agencies: 
investigated leads relating to the extreme right-wing as and when received; 


in 2018 began work to better understand the threat, most relevantly the New Zealand 
Security Intelligence Service baselining project on domestic right-wing extremism; and 


conducted a tabletop counter-terrorism Response exercise in October 2018 based ona 
scenario of an assumed motor vehicle attack on worshippers outside Masjid an-Nur. 


What intelligence did agencies receive from Five Eyes partners regarding 
white supremacy and right-wing extremism before 15 March 2019? 


Very little international partner reporting related to right-wing extremism (see 

Part 8, chapter 4). For example, in the second quarter of the 2018-2019 financial year, 
the Government Communications Security Bureau received 7,526 intelligence reports 
from international partners about terrorism and violent extremism, none of which 
related to right-wing extremism. 
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Reporting that was received included: 


Intelligence from an international partner that assessed the potential - in terms of the 
availability of firearms - of a “Norwegian-style attack” occurring in that country. 


Intelligence received from an international partner in 2013 about the extreme right-wing 
in their country. 


Intelligence received from an international partner about an extreme right-wing group 
member possibly planning a violent act. This was cited in a March 2017 Combined Threat 
Assessment Group assessment, which observed that “an increase in anti-Semitic and 
anti-Muslim hatred is a concern for [the international partner’s] authorities”. 


Intelligence cited in a May 2017 Combined Threat Assessment Group assessment 
addressed implications for New Zealand of the Manchester Arena terrorist attack. 


Public sector agencies involved in the counter-terrorism effort participated in some meetings 
and training opportunities with international partners that addressed, among other things, 
the extreme right-wing. 


Given the upward trend in white supremacist and other right-wing extremist acts of 
violence (actual and prevented) in the decade prior, why was there no concern of this 
happening in New Zealand until mid-2018? 


There was some concern about the threat from the extreme right-wing (see Part 8, 

chapter 4). The reasons why counter-terrorism resources were largely concentrated on the 
threat of Islamist extremist terrorism are discussed in the same chapter. They largely come 
down to Islamist extremism being seen as the presenting threat and resource limitations. 


Was any assessment done regarding danger to Muslim communities? If so, what was 
the result? 


Strategic and tactical intelligence assessments primarily focus on the threat posed, and who 
poses the threat, rather than the risk to particular communities. Intelligence assessments 
can relate specifically to the risk to events or locations (for example, threat associated with 
the hosting of the Rugby World Cup 2011). 


We have seen one New Zealand Police intelligence assessment produced before 

15 March 2019 that specifically refers to the risk to Muslim communities. A May 2018 report, 
National Security Situation Update: Ramadan 2078, which was provided to New Zealand 
Police Assistant Commissioners and District Commanders, noted that Da’ish had issued calls 
for terrorist attacks during Ramadan for the previous three years and could again. It advised 
that Ramadan was also a time of increased risk to the Muslim community and noted: 


The Muslim community in New Zealand has experienced sporadic incidents of vandalism 
and abuse. While not frequent, incidents do create widespread concern among the 
community when they do occur, as well as attention from the media. 
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Other assessments that referred more generally to the threat of right-wing extremism are 
discussed in chapter 4. 


17.2 National Security and Intelligence Priorities 


How are the National Security and Intelligence Priorities developed? 


The Department of the Prime Minister and Cabinet’s National Security Group leads the 
development of the National Security and Intelligence Priorities (see Part 8, chapter 3), 
following this process: 


The National Assessments Bureau produces a Strategic intelligence assessment on the 
national security threats facing New Zealand. 


Priorities are developed, informed by the strategic assessment, and current government, 
sector and agency policy priorities and, since 2018, the National Risk Register. 


Relevant Public sector agencies are consulted on the draft Priorities. 
The Security and Intelligence Board endorses the Priorities. 


Cabinet approves the Priorities. 


Which agencies influence the setting of the National Security and Intelligence Priorities, 
and how? 


The Government Communications Security Bureau, Immigration New Zealand, New Zealand 
Customs Service, New Zealand Police, the New Zealand Security Intelligence Service and 
other Public sector agencies contribute to the setting of National Security and Intelligence 
Priorities (see Part 8, chapter 3). For example, for the terrorism Priority the relevant Public 
sector agencies are: 


consulted on the drafting of the strategic assessment prepared by the National 
Assessments Bureau that informs the development of the Priority; 


consulted on the draft Priority individually, and in cross-agency workshops; 


consulted on the Department of the Prime Minister and Cabinet’s policy papers that 
recommend changes to the Priorities; and 


represented at the Security and Intelligence Board, which endorses the Priorities 
to be sent to the Cabinet committee. 
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Were white supremacy and right-wing extremism included in the current 
National Security and Intelligence Priorities as areas of focus for counter-terrorism? 


Not specifically. The 16 National Security and Intelligence Priorities approved by Cabinet in 
December 2078 included a terrorism priority (See Part 8, chapter 3). It includes domestic as 
well as international terrorism threats but does not refer to particular ideologies. 


The domestic terrorism threats were described as “those that may arise in and against 

New Zealand or be carried out by New Zealanders overseas ... [and the] scope includes 
emerging trends and characteristics associated with overseas terrorist networks’ 

links to New Zealand”. The international terrorism threats were described as “threats 
against New Zealand’s interests overseas in areas which have the greatest exposure for 

New Zealanders, and the trends and characteristics of emerging regional and global terrorism 
threats” that may impact on New Zealand. An unclassified version of the National Security 
and Intelligence Priorities was initially published in the Department of the Prime Minister and 
Cabinet’s 2019 Annual Report.?%* In September 2020 the Department of the Prime Minister 
and Cabinet updated its website to include the unclassified version of the National Security 
and Intelligence Priorities,*° which included: 


Terrorism. Threats to New Zealand, New Zealanders and New Zealand's interests from 
terrorism (ideologically, politically or religiously motivated violence) at home and abroad. 


Did the National Assessments Bureau or the New Zealand Security Intelligence Service 
raise the issue of white supremacy and right-wing extremism in the drafting of previous 
or the current National Security and Intelligence Priorities? 


National Assessments Bureau 


Four strategic assessments produced by the National Assessments Bureau (see Part 8, 
chapter 4) have informed the development of the National Security and Intelligence Priorities 
in 2012, 2015, 2016 and 2018 (see Part 8, chapter 3): 


The strategic assessment that informed the 2012 Priorities noted the resurgence of 
neo-Nazi and extreme right-wing groups in Europe and the United States of America 
espousing hard-line nationalist and anti-immigration rhetoric. It assessed that: 


such groups may come to prominence in New Zealand in response to the effects of the 
global economic crisis; and 


economic and immigration policies could stir such groups in New Zealand to protest 
against perceived increasing inequalities, and this could lead to the adoption of more 
violent methods to effect political change. 





238 Department of the Prime Minister and Cabinet, footnote 46 above at page 85. 


39 Department of the Prime Minister and Cabinet, footnote 47 above. 
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The strategic assessment that informed the 2015 Priorities did not mention white 
supremacy or right-wing extremism. 


The strategic assessment that informed the 2016 Priorities noted that the recovery from 
the Global Financial Crisis has left governments under pressure from disgruntled citizens, 
who are looking for alternatives on the political right and left, with unpredictable 
consequences. 


The strategic assessment that informed the 2018 Priorities did not mention white 
supremacy or right-wing extremism. 


New Zealand Security Intelligence Service 


The New Zealand Security Intelligence Service was consulted during the development of the 
National Assessments Bureau assessments that informed the development of the Priorities in 
2012, 2015 and 2016. 


The New Zealand Security Intelligence Service (with New Zealand Police and the Department 
of the Prime Minister and Cabinet) is the owner of the terrorism risk profile in the National 
Risk Register (see Part 8, chapter 3), which informed the development of the National 
Security and Intelligence Priorities in 2018. 


The first terrorism risk profile (in January 2018) noted: 


the global rise of a new far right ideology, which had been strengthened by opposition 
to refugee settlements and Islamist extremist attacks in the West; 


that there was no indication that far right groups in New Zealand have the intent and 
capability to promote their ideology by an act of terrorism; and 


that an extreme right-wing lone actor attack in New Zealand remained a possibility, albeit 
a remote one. 


Do trends in terrorist attacks (actual or prevented) on Five Eyes and other western 
countries inform the development of the National Security and Intelligence Priorities? 
If so, how? 


Yes. Strategic intelligence assessments produced by the National Assessments Bureau 

(see Part 8, chapter 4) inform the development of the National Security and Intelligence 
Priorities. These draw on all sources of intelligence, both secret and open-source. This 
includes intelligence and reports from Five Eyes and other international partners, as well as 
other Public sector agencies involved in the counter-terrorism effort, such as the Combined 
Threat Assessment Group, the Government Communications Security Bureau, New Zealand 
Police and the New Zealand Security Intelligence Service. 
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Did the Government Communications Security Bureau or the New Zealand Security 
Intelligence Service withhold any information from the Department of the Prime Minister 
and Cabinet, and Cabinet, relating to the global trends in white supremacy and 
right-wing extremism during each of the previous National Intelligence Priorities cycles 
since they were introduced? 


We have no indication, or evidence, that this occurred. 


17.3 Intelligence investigations 


Before 15 March 2019, how many national security investigations have been carried out 
on Muslim individuals, associations or institutions? 


The New Zealand Security Intelligence Service told us that their investigations focus on 
individuals, not associations or institutions (see Part 8, chapter 5). Approximately 
30-40 individuals were on the investigative prioritisation (watch) list being investigated 
by the New Zealand Security Intelligence Service at any given time in recent years. 

Most of these individuals were assessed by the New Zealand Security Intelligence Service 
as supporters of Da’ish. 


New Zealand Police told us that, before 15 March 2019, most of their counter-terrorism 
investigations were focused on the threat of Islamist extremism (see Part 8, chapter 6). 

The limitations of New Zealand Police’s recording practices mean that exact numbers are not 
available. There was no centralised information system for recording national security leads, 
the actions taken, outcomes of investigation and characteristics of complainants, victims or 
offenders (such as religion). 


Before 15 March 2019, how many national security investigations have been carried out 
on white supremacist or right-wing extremist individuals, associations or institutions? 


The New Zealand Security Intelligence Service’s baselining project on domestic right-wing 
extremism, which started in mid-2018, generated ten leads relevant to right-wing extremism 
(see Part 8, chapter 5). These leads were treated according to the New Zealand Security 
Intelligence Service’s leads management process. Some of these leads remained open as 

at 15 March 2019. 


While we have seen evidence that New Zealand Police had conducted national security 
investigations into activities of suspected white supremacists or right-wing extremists 
before 15 March 2019 (see Part 8, chapter 6), the limitations of New Zealand Police’s 
recording practices mean that exact numbers are not available. 
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After 15 March 2019, New Zealand Police compiled a list of 1,700 individuals who had 
potential right-wing extremist characteristics from a review of their intelligence holdings. 
They told us that they had never attempted to do this before 15 March 2019. New Zealand 
Police told us that the accuracy and reliability of the information used to compile the list 
was variable and required further assessment. New Zealand Police collaborated with 

the New Zealand Security Intelligence Service and New Zealand Customs Service after 

15 March 2019 to refine and prioritise the agencies’ leads on right-wing extremist individuals 
and groups in New Zealand. 


17-4 National Assessments Bureau 


Did the National Assessments Bureau produce any assessments on global developments 
and events related to white supremacy and right-wing extremism? 


Yes. The National Assessments Bureau produced two intelligence assessments related to 
right-wing extremism between 2010 and 15 March 2019 (see Part 8, chapter 4): 


A 2013 assessment, titled Far Right Rising: A Dangerous Myth, focused on the changing 
political landscape in Europe. The assessment noted that far right movements stepped 
up their anti-immigrant and anti-Muslim rhetoric during the European debt crisis (2009 
onwards) but did not cover terrorism and/or violent extremism implications. 


A September 2018 assessment, titled Global Terrorism Update, included a small 
section on “extreme right terrorism”. It noted that “between 12 September 2001 and 

31 December 2016 in the United States of America, there were more extreme-right 
incidents than Islamist terrorist incidents resulting in fatalities”. It concluded that there 
had been an emerging threat of extreme right-wing terrorism for some time, but groups 
were fragmented with limited international coordination. 


Was the National Assessments Bureau dissatisfied with the intelligence gathering 
practices or products of the New Zealand Security Intelligence Service or 

the Government Communications Security Bureau in relation to white supremacy and 
right-wing extremism? 


We have no indication, or evidence, that this is the case. 
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17.5 The New Zealand Security Intelligence Service 


What level of awareness did the New Zealand Security Intelligence Service have of 
right-wing extremism before 15 March 2019? What information informed this awareness, 
including from internal analysis and/or international partners? 


Before 15 March 2019, the New Zealand Security Intelligence Service had: 


received a few reports and assessments from international partners that included 
intelligence about extreme right-wing activity; and 


only a limited understanding of the right-wing extremist threatscape in New Zealand. 
This was due to a range of factors, including resourcing. 


Up until mid-2018, the New Zealand Security Intelligence Service’s counter-terrorism 
resources were focused on monitoring and investigating the presenting threat - supporters 
of Da’ish seeking to participate in hostilities abroad or to mount, encourage or support 
terrorist attacks, or undertake activities in support of terrorism, in New Zealand (see Part 8, 
chapters 4 and 5). 


Why did the New Zealand Security Intelligence Service undertake a baselining project on 
right-wing extremism in 2018? Why then? 


From at least early 2016, it was appreciated by the New Zealand Security Intelligence Service 
there was a potential for terrorism from non-Islamist extremist sources and that it was 
largely unsighted to the nature and extent of such threats (see Part 8, chapter 5). This is 
referred to in a February 2016 Strategic Capability and Resourcing Review Cabinet paper, 
which identified the expected capacity increase in relation to countering violent extremism: 


The capability increases from a current state where partial monitoring of watch-list targets 
is possible and there is minimal coverage outside Auckland, to a future where there is a 
New Zealand-wide baseline threat picture. 


Baselining emerging terrorism threats was identified as the third goal in the New Zealand 
Security Intelligence Service’s 2016 10-Year Operational Strategy,*° but its ranking meant 
that work on it was deferred. The New Zealand Security Intelligence Service did not have 
enough counter-terrorism resources until May 2018 to start its baselining project. 





*4°nlew Zealand Security Intelligence Service, footnote 55 above. 
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Has the extreme right-wing baselining project been completed? If so, what were 
the findings? If not, has the scope, timeframe or resourcing changed as a result of the 
15 March 2019 attack? 


The baselining project resulted in a Security Intelligence Report on extreme right-wing 
online activity in New Zealand in July 2019. The report examined the online activity of a 
number of far right and extreme right-wing groups, forums and individuals in New Zealand. 
The report noted that within New Zealand there were a growing number of individuals 
espousing violent extreme right-wing rhetoric online. Despite this, as at July 2019, they 
did not identify any New Zealand-based groups that openly advocated the use of violence, 
and did not identify any indication that individuals or groups associated with the extreme 
right-wing in New Zealand were mobilising to conduct an ideologically-motivated act of 
violence. The report acknowledged that this could be, in part, because these groups were 
avoiding publicly using violent rhetoric so as to attract a wider audience and avoid detection 
by law enforcement and security agencies. 


After 15 March 2019, the New Zealand Security Intelligence Service collaborated with 

New Zealand Police and New Zealand Customs Service to update and enhance the agencies’ 
collective understanding of the post-attack domestic right-wing extremist threatscape, 
including refining and prioritising leads. This project concluded in June 2020. 


After 15 March 2019, the New Zealand Security Intelligence Service directed more resources 
towards building a picture of emerging threats (see Part 8, chapter 5). It established a 
dedicated target discovery team within the Counter-Terrorism Unit, which has been scoping 
and re-scoping a number of discovery projects. 


Did the extreme right-wing baselining project influence any intelligence activities 
relating to white supremacy or right-wing extremism before 15 March 2019? 


Yes. The domestic right-wing extremism baselining project generated ten leads relevant 

to right-wing extremism. These leads were treated according to the New Zealand Security 
Intelligence Service’s leads management process, and some remained open at 15 March 2019. 
In addition, the New Zealand Security Intelligence Service’s online operations team began to 
look at right-wing forums (see Part 8, chapter 5). 





41 New Zealand Security Intelligence Service, footnote 57 above at page 96. 
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What evidence informed Rebecca Kitteridge’s claim regarding the “slow, but concerning, 
rise of right-wing extremism internationally” in her opening statement before 
Parliament’s Security and Intelligence Committee on 20 February 2019? Was it informed 
by the baselining project? 


The Director-General of Security’s comments were informed by a few reports and 
assessments the New Zealand Security Intelligence Service had been receiving from 
international partners, including about extreme right-wing activity. 


The comments were also informed by the work that had been completed up to that date on 
the extreme right-wing baselining project, which had started in May 2018 and was due for 
completion in June 2019 (see Part 8, chapter 5). 


17.6 New Zealand Police 


Do New Zealand Police keep a formal or informal list of Muslim individuals? Do they have 
any units that are predominantly focussed on Muslim individuals or communities? 


Religious faith is rarely recorded in police data holdings and New Zealand Police systems 
do not allow the automatic or easy collation of a list of people based on their religion. 
New Zealand Police therefore do not keep a list of Muslim individuals. 


New Zealand Police do not have any units whose purpose is to focus on Muslim individuals 
and communities. One of the responsibilities of ethnic liaison officers is to develop 
relationships with communities, including Muslim communities, but they do not work 
exclusively with any one ethnic or religious community. The National Security Investigation 
Team have primarily focused on Islamist extremism (see Part 8, chapter 6). 


What records do New Zealand Police have of complaints of anti-Muslim or threatening 
behaviour against Muslim individuals and Muslim institutions, in Christchurch and 
nationally? 


The limitations of New Zealand Police’s recording practices means that exact numbers are not 
available. There was no centralised information system for recording national security leads, 
the actions taken, outcomes of investigations, and characteristics of complainants, victims or 
offenders (such as religion). 


New Zealand Police provided us with a list of recorded interactions with Muslim 
individuals from 2010 to 14 March 2019. This list included approximately 45 reports of 
threatening behaviour against Muslim individuals and institutions, of which six were in 
the Canterbury region. The list was created after 15 March 2019 by asking Districts and 
specialist units to search their various databases, and collating the information provided 
(see Part 8, chapter 6). 


We discuss recording of hate-motivated offending in Part 9, chapter 4. 
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Do New Zealand Police collect information on threats or attacks against places of 
worship or religious institutions in New Zealand? If so, how many such incidents have 
occurred since 1990? 


The limitations of New Zealand Police’s recording practices mean that this information is not 
available. There was no centralised information system for recording national security leads, 
the actions taken, outcomes of investigation, characteristics of complainants, victims or 
offenders (such as religion), or locations such as places of worship or religious institutions. 


What, if any, partnerships have been built with international partner agencies to 
build capability for policing the perceived threat of white nationalism and right-wing 
extremism and the perceived threat of Islamist extremism? 


New Zealand Police have partnerships with international law enforcement agencies and 
groups, including the Five Eyes Law Enforcement Group. One of the purposes of these 
partnerships is to build capability across a range of ideological threats. 


New Zealand Police are a member of the Australia New Zealand Counter-Terrorism 
Committee. The Committee provides specialist training, which New Zealand Police staff 
have attended. Right-wing extremism has been a training focus on occasion. 


New Zealand Police have adopted prioritisation and risk assessment tools developed by the 
Committee, such as the Operational Threat Assessment Guideline and the Counter-Terrorism 
Persons of Interest Prioritisation Tool Guideline. These contain generic indicators of threat 
and capability relevant to both Islamist extremist and right-wing extremist threats (see 

Part 8, chapter 6). 


The leads triage process New Zealand Police adopted in the immediate aftermath of the 
15 March 2019 terrorist attack was developed in consultation with specialist staff from 
international partner agencies. 


New Zealand Police are currently increasing the number of staff based in other countries. 


Do New Zealand Police respond differently to reports of suspicious or threatening 
behaviour related to violent extremism or terrorism when the complaint is made against 
a Muslim individual compared to when the complaint is made against a non-Muslim 
individual? 


The limitations of New Zealand Police’s recording practices mean that it is not possible 
to undertake a comparative analysis of how similar threats against Muslim individuals and 
non-Muslim individuals were actioned by New Zealand Police. 
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Many Muslim communities told us they felt that New Zealand Police did not always take 
reports about suspicious or threatening behaviour seriously (see Part 3: What communities 
told us). When we put this to New Zealand Police, they told us they are “threat agnostic” - 
meaning that when they receive a lead they use the same assessment criteria regardless of 
the ideological source of the threat. 


New Zealand Police lacked a sophisticated understanding of the new iterations of the extreme 
right-wing that emerged from about 2016. Many frontline staff lacked an understanding of 
the risks and threats of terrorism, including how to recognise such risks and threats and 

what to do about them. While the National Security Investigations Team comprised capable 
investigators, they had limited knowledge of, and experience in investigating, right-wing 
extremists (see Part 8, chapter 6). 


What are the policies and practices of New Zealand Police in relation to passing on 
complaints or information about suspected extremists to the New Zealand Security 
Intelligence Service? 


New Zealand Police and the New Zealand Security Intelligence Service jointly manage 
counter-terrorism leads in accordance with an agreed joint leads process (see Part 8, 
chapter 12). The New Zealand Security Intelligence Service hosts a fortnightly Joint 
Leads Meeting attended by the Department of Corrections, Immigration New Zealand, 
New Zealand Customs Service, New Zealand Police and (since September 2019) the 
Government Communications Security Bureau. This forum is where agencies share leads 
and intelligence. In addition, the counter-terrorism agencies regularly share information 
on leads in real time, on an informal basis and as investigations progress. 


What policies and procedures do New Zealand Police follow regarding the financing of 
international terrorism by individuals residing in New Zealand? 


The Anti-Money Laundering and Countering the Financing of Terrorism Act 2009 requires 
the financial sector to report suspicious financial activities to New Zealand Police’s Financial 
Intelligence Unit through the Prescribed Transaction Reporting regime. 


Reporting entities such as financial institutions and casinos have to submit all international 
fund transfers over $1,000 and all cash transactions over $10,000 to the Financial 
Intelligence Unit. This information is used for modelling and detecting suspicious criminal 
activity, which is referred to New Zealand Police investigation teams. The Financial 
Intelligence Unit produces a quarterly report which, among other things: 


examines money laundering and terrorist financing methods used in New Zealand and 
overseas; and 


provides indicators of money laundering and terrorist financing techniques. 
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17.7 Government Communications Security Bureau 


Did the Government Communications Security Bureau take any action in relation to 
right-wing extremist threats, including actual or planned acts of terrorism within 
New Zealand, before 15 March 2019? 


No. Before 15 March 2019, the Government Communications Security Bureau was not tasked 
by any agency to conduct signals intelligence activities in relation to right-wing extremism. 


Since 2016, all of the Government Communications Security Bureau’s counter-terrorism 
activities have been in response to being tasked by another agency (usually the New Zealand 
Security Intelligence Service). In accordance with this customer-led approach, the 
Government Communications Security Bureau does not “unilaterally undertake domestic 
counter-terrorism investigations” and does not “self-task or identify its own intelligence 
questions” for any counter-terrorism activity, domestic or international (see Part 8, 

chapter 7). 


Did the Government Communications Security Bureau seek to have any extreme 
right-wing content removed from social media before 15 March 2019? 


No. The Government Communications Security Bureau does not play a role in the 

reporting, filtering and removing extremist content online. This is because the identification, 
reporting and removal of extremist content from social media platforms is not an 
intelligence activity. 


The removal of extremist content from social media is undertaken by the Department of 
Internal Affairs, organisations such as Netsafe or by social media organisations themselves. 


Are social media accounts of people posting weaponry tracked? 


No. Posting images of weaponry on social media is not an illegal activity. 
The Government Communications Security Bureau told us it does “not monitor all of 
New Zealand’s social media activity or internet traffic” because it does not have the legal 


authority, technical means or resources to do so. No Public sector agency monitors all 
of New Zealand’s social media activity or other internet activity. 
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17.8 The border agencies 


Why was the individual not picked up as a threat at the border? 


The information available to the border agencies about the individual was limited (see Part 6, 
chapter 6). Between them the border agencies held information on: 


the individual’s passport information (name, gender, date of birth, birthplace, 
citizenship, etc); 


the dates, times, arrival and destination locations of flights he took in and out of 
New Zealand from 1999 onwards; 


information indicating that he travelled with gaming friend from New Zealand to Japan 
and back in 2018; 


information that he otherwise travelled alone on flights in and out of New Zealand from 
August 2017 onwards; 


his arrival and departure cards for the last two international flights he took in 2018; and 


Advanced Passenger Processing and Passenger Name Record data in relation to the 
individual about his arrivals into New Zealand from March 2013 onwards and departures 
from New Zealand from 28 September 2017. 


The border agencies did not hold information about the individual’s full travel history. Both 
border agencies ran the information they had about the individual through their automated 
screening systems, and these processes did not identify any risks or issues. No agency raised 
a border alert on the individual and the individual was never subject to secondary processing 
at the border. On each arrival into New Zealand, his presentation at the border appears to 
have been unremarkable. 


In summary, the individual was not picked up at the border as he did not present as a threat. 


What policies and procedures are used by border agencies to identify which individuals 
to stop and search or interview? Is there a specific policy or procedure relating to 
non-Islamist terrorist threats? 


Immigration New Zealand and New Zealand Customs Service each have their own processes 
for identifying terrorism threats (Part 8, chapter 8). 


Immigration New Zealand identify terrorism threats through their Risk Targeting Programme 
and the Advanced Passenger Process. They use risk indictors and target advice on terrorism 
to identify who may pose a threat. The targeting rules are mostly built around clusters of 
individual risk factors that, when present in a single travel record, indicate that the person 
may be a potential security risk. Where a risk is identified, Immigration New Zealand will 
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instruct the airline not to allow the person to board the plane. Ifthe risk is identified too late 
to allow this to happen, an alert will be placed in New Zealand Customs Service’s database 
and it will be addressed when the passenger arrives at the border. 


New Zealand Customs Service run their own rules-based targeting programme across the 
Passenger Name Record, passport and flight data to identify people who may pose a risk 

and require intervention at the border. The rules-based targeting applies across the various 
issues New Zealand Customs Service tackle, such as drug smuggling, money laundering, 
objectionable material and terrorism. To identify terrorism risks New Zealand Customs 
Service use a terrorism risk profile developed by their intelligence team. The terrorism 

risk profile sets out a list of singular terrorism risks, which when combined into a rules-based 
targeting system can identify people of interest. 


Before 15 March 2019, the border agencies, targeting rules and indicators for identifying 
potential terrorist threats at the border were primarily targeted at identifying Islamist 
extremist terrorist threats. 


Immigration New Zealand had no specific targeting rule in place for electronically screening 
for extreme right-wing terrorism threats (such as travel history, age or sex). 


New Zealand Customs Service had one indicator (which was added in 2013) relating to white 
supremacy and right-wing extremism to its counter-terrorism profile to assist frontline staff. 


Do the border agencies know what countries a person entering New Zealand has 
travelled to? 


Not always. It is not always feasible to obtain a person’s full travel records. Technical 
and data sharing difficulties mean Immigration New Zealand generally do not hold the full 
travel history for an individual. The border agencies will, where necessary from time to 
time, request further travel information from overseas. However, getting detailed travel 
information may be a long process and involve international agreements (see Part 8, 
chapter 8). 


Which countries a person has travelled to would raise red flags for entry into 
New Zealand, and why? 


The national security instructions include a list of countries or territories of possible security 
concern including those known for extremism (see Part 8, chapter 8). This list is primarily 
focused on people who have connections with African, Asian and Middle Eastern countries. 
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Is it statistically likely for a person with the travel history of the individual to be stopped 
and searched or interviewed by New Zealand Customs Service? 


This question assumes that the border agencies will know what countries a person has 
travelled to. This is not always the case. As set out in our answer to a previous question, 
it is not always feasible to obtain a person’s full travel records. As discussed in 

Part 6: What Public sector agencies knew about the terrorist, the border agencies had 
limited information about the individual's travel history. 


Do border agencies’ processes vary depending on the country of citizenship or origin? 
If so, how? 


Yes. Immigration New Zealand applies differing scrutiny to different travellers (see Part 8, 
chapter 8). The groups below are listed in order of the increasing scrutiny they receive: 


Australian citizens. 
Citizens from visa-waiver countries. 
Citizens from countries requiring visas to travel to New Zealand. 


People with connections to the countries in the national security instructions. 


How many people were denied entry into New Zealand because they were determined 
to pose a risk to security, a threat to public order, or a threat to public interest in 
2015-2019 by country of origin and ethnicity? 


Immigration New Zealand do not record to this level of detail the reasons for declining entry 
permission. They do not record information on people who are refused entry to New Zealand 
based on security grounds, including their ethnicity and country of origin. 


How do border agencies ensure that those entering New Zealand have never publicly 
made a racist statement or been a member of a racist group? 


They do not. The Immigration Act does not state that a person must be excluded or denied 
entry permission from New Zealand for being a racist or a member of a racist group (unless 
that group is a designated terrorist entity). A person may be excluded or denied entry 
permission if they are likely to be a risk to security, public order or the public interest or on 
character grounds (see Part 8, chapter 8). 


How many speakers with extremist (Islamist and non-Islamist) views were prevented 
from entering New Zealand before 15 March 2019? On what basis? 


Immigration New Zealand’s records cannot be searched using the criteria of their occupation 
(whether they are a speaker), their views or their religion. 
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In what instances has New Zealand Customs Service received complaints about racial 
or religious profiling? 


Between 1 July 2019 and 30 June 2020, New Zealand Customs Service received 

47 complaints, of which six complaints included allegations of potential discrimination 
based on racial or religious bias. This is similar to the number of complaints about racial 
or religious bias received in previous years. There were five allegations of racial and 
religious bias between 1 July 2017 and 30 June 2018 and again between 1 July 2018 and 
30 June 2019. The complaints came from people spanning a range of ethnicities and 
nationalities. The complaints of racial or religious bias were investigated by New Zealand 
Customs Service, and none were found to be substantiated. 


Is there a culture or institutionalisation of anti-Muslim bias at the New Zealand Customs 
Service? 


New Zealand Customs Service’s risk identification rules are designed to identify people of 
terrorism concern. Before 15 March 2019, New Zealand Customs Service’s targeting rules and 
indicators were primarily targeted at identifying Islamist extremist terrorism threats. While 
New Zealand Customs Service maintain that they do not deliberately target people based 

on their religious beliefs, the way that the risk identification rules and indicators operate 
mean that Muslim individuals are particularly susceptible to being stopped, questioned and 
searched at the border (see Part 8, chapter 8). 


17.9 Experience of staff 


How many full-time equivalent staff were dedicated to white supremacy and right-wing 
extremism compared to Islamist extremism in the 10 years before 15 March 2019? 


No individual staff or teams across the counter-terrorism effort were solely focused on 
understanding and responding to the threat of right-wing extremism - they were also focused 
on Islamist extremist threats or other non-Islamist extremist threats. 


Combined Threat Assessment Group 


Before 15 March 2019 the Combined Threat Assessment Group generally had a full-time 
equivalent staff of five to seven analysts, each of whom worked on a range of terrorism 
threats. No analyst worked exclusively on the threat of right-wing extremism. 
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Government Communications Security Bureau 


Approximate intelligence staff numbers (including graduates) dedicated to domestic 
counter-terrorism at the Government Communications Security Bureau” in recent years were 
two in 2015, four in 2016 (increased by graduates), two in 2017 and seven in 2018 (see Part 8, 
chapter 7). None of these staff worked solely on right-wing extremism. 


Since 2016, all of the Government Communications Security Bureau’s counter-terrorism 
activities have been in response to being tasked by another agency. Before 15 March 2019, 
the Government Communications Security Bureau was not tasked by any agency to conduct 
signals intelligence activities in relation to right-wing extremism. 


Immigration New Zealand 


Immigration New Zealand do not have a dedicated counter-terrorism team and therefore do 
not have any staff dedicated solely to counter-terrorism. 


National Assessments Bureau 


The National Assessments Bureau did not have a dedicated terrorism analyst until 2018, 
when one full-time terrorism analyst position was established. This analyst had responsibility 
across all terrorist ideologies. 


New Zealand Customs Service 


New Zealand Customs Service have a counter-terrorism intelligence team. Staff work across 
a range of threats, and therefore no staff are dedicated solely to the threat of right-wing 
extremism. 


New Zealand Police 


There were no staff dedicated solely to right-wing extremism within New Zealand Police. 

Staff in the National Security Investigations Team and Security and Intelligence Threats Group 
worked across all national security threats. Some of their time was spent investigating leads 
related right-wing extremism, however, the majority of staff time was dedicated to Islamist 
extremism. 





*42This number does not include staff in other areas of the Government Communications Security Bureau whose work may 
contribute in part to its counter-terrorism activity. 
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New Zealand Security Intelligence Service 


As at May 2018, there were three investigative teams in the Counter-Terrorism Unit in 

the New Zealand Security Intelligence Service, comprising three team managers and 

16 investigators. Each of the three teams had responsibility for Islamist extremist threats, 
and one team also had responsibility for non-Islamist threats. Twenty percent of investigator 
time was allocated to the baselining and discovery work programme, which included a 
project on domestic right-wing extremism. 


In the years before mid-2018, the Counter-Terrorism Unit resources, as well as those of the 
collection group (such as surveillance, technical operations and human intelligence), were 
focused on the presenting threat of Islamist extremist terrorism. 


What is the demographic breakdown of the New Zealand Security Intelligence Service 
staff working on countering different forms of terrorism? Please provide available 
information on numbers of staff assigned (whether on a full-time or percentage basis), 
ethnic, religious and gender identities, capabilities and qualifications, and seniority. 


The New Zealand Security Intelligence Service does not hold demographic statistics by 
directorate. This means the demographic breakdown of staff in the Counter-Terrorism Unit 
is not available. 


As at June 2020, 12.1 percent of the New Zealand Security Intelligence Service workforce 
had an ethnically diverse background,“* compared to 10.8 percent in June 2019. The 

New Zealand Security Intelligence Service had a target of having 13 percent of its workforce 
from ethnically diverse backgrounds by 30 June 2020, which it did not meet primarily 
because of a high turnover rate among ethnically diverse staff.” 


The 2019 Arotake Review found that, although there had been a substantial increase in the 
number of investigators in the New Zealand Security Intelligence Service in 2018, half of the 
investigators had less than one year’s experience at the time of the 15 March 2019 terrorist 
attack.%° The Counter-Terrorism Unit was, however, led by experienced staff. 





*43 This includes people of Maori, Asian, Pacific Island, Middle Eastern, Latin American and African descent. 


44The figures here were provided to the Royal Commission. These figures are different to those listed in Part 9: Social cohesion 
and embracing diversity, which are sourced from the New Zealand Security Intelligence Service’s and the Government 
Communications Security Bureau’s annual reports. This is because they use different methodologies. The figures in agency 
annual reports are calculated using the Public Service Commission methodology, which uses the number of people who identify 
as being a certain ethnic group divided by the number who have provided an ethnic group. Conversely, the figures referenced 
above are calculated using the number of people who identify as being a certain ethnic group divided by the number of all 
staff (regardless of whether they list their ethnicity). We use the figures provided to the Royal Commission to answer the 
question above so that we are able to report on the New Zealand Security Intelligence Service’s progress towards their ethnic 
diversity target. 


*45 New Zealand Security Intelligence Service, footnote 57 above at page 59. 
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Did agency staff receive specialist training on white supremacy and right-wing 
extremism before 15 March 2019? 


Government Communications Security Bureau 


No. As the Government Communications Security Bureau was not tasked to undertake any 
work on right-wing extremism before 15 March 2019, staff did not receive any training on this 
subject matter and their focus remained on Islamist extremism. 


New Zealand Customs Service 


Yes. Since 2013, frontline New Zealand Customs Service staff have been provided with 

guidance on recognising the indicators of white supremacy and extremism while processing 
people at the border. This includes information on New Zealand and international groups of 
right-wing extremist interest, and information on indicators. In 2018 material on right-wing 
extremism was added to New Zealand Customs Services training material for frontline staff. 


New Zealand Police 


Yes. The type of training New Zealand Police staff received on white supremacy or right-wing 
extremism included the following: 


All staff had access to an awareness raising video on counter-terrorism which was 
available from 19 April 2018. This included material related to right-wing extremism. 


In 2018, a session on the counter-terrorism environment, issues and challenges was 
delivered to staff that attended the Serious Crime Course. It included a section on 
right-wing extremism. 


In 2018, a presentation titled Extremist Threatscape was delivered to the Advanced 
Police Negotiators Training course. It focused predominantly on Islamist extremism, 
but also referred to right-wing extremism including in New Zealand. 


Specialist national security staff received training primarily through the Australia 
New Zealand Counter-Terrorism Committee, including on right-wing extremism. 


New Zealand Security Intelligence Service 


No. The New Zealand Security Intelligence Service told us it does not run or commission 
training exclusively on white supremacy and right-wing extremism. 


Since the commencement of the baselining and discovery work programme in mid-2018, 

New Zealand Security Intelligence Service staff have engaged with international and domestic 
partners in relation to a range of extreme ideologies, including right-wing extremism, and 
indicators of mobilisation to violence. 
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Have the National Assessments Bureau analysts with regional expertise developed 
adequate knowledge of nationalist and populist movements including their extremist 


fringes? 

The National Assessments Bureau did not have a dedicated terrorism analyst until 2018, 
when one full-time terrorism analyst position was established. This analyst had responsibility 
across all terrorist ideologies. 


The National Assessments Bureau produced two intelligence assessments related to 
right-wing extremism between 2010 and 15 March 2019 - one in 2013, and one in 2018. 


642 


—————} 


Glossary 


Term 


Al Qaeda 


Definition 


An Islamist extremist terrorist organisation, which was 
responsible for the 11 September 2001 terrorist attacks on the 
United States of America. 





assessment agencies 


The Combined Threat Assessment Group (hosted by the 

New Zealand Security Intelligence Service) and the National 
Assessments Bureau (in the Department of the Prime Minister 
and Cabinet). 





authorising environment 


The environment that provides authority for a Public sector 
agency to operate effectively. Formal sources of authority 
include legislation, Cabinet decisions and budget approvals. 
Informal sources of authority include ministers, the central 
agencies, other Public sector agencies, stakeholders, 
communities, civil society and the private sector. 





capacity and capability 


Capacity describes whether there is enough of something 
(for example, staff) to achieve a certain outcome. Capability 
describes the ability to achieve a certain outcome, for 
example, whether people have the right knowledge, skills 
and technical tools. 





central agencies 


The Department of the Prime Minister and Cabinet, Te Kawa 
Mataaho Public Service Commission (formerly the State 
Services Commission) and the Treasury. 





classical model of 
investigation 


A model of counter-terrorism investigation that begins with 
lead information that is then investigated. 





Combined 
Counter-Terrorism 
Investigations and 
Leads Meeting 

(Joint Leads Meeting) 


A fortnightly meeting hosted by the New Zealand Security 
Intelligence Service and attended by the Department of 
Corrections, Immigration New Zealand, New Zealand Customs 
Service, New Zealand Police and (since September 2019) the 
Government Communications Security Bureau. Agencies bring 
leads they have and the other agencies can look across their 
own data holdings to provide further intelligence on the lead. 





communications 
intelligence (COMINT) 


Information derived from communications. The primary 
component of signals intelligence (SIGINT). 





control orders 


Court-imposed civil orders that place conditions or restrictions 
- such as curfews and electronic monitoring - on individuals 
who are seen to be at high risk of engaging in terrorism. 
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Term 


counter-terrorism 
agencies 


Definition 


New Zealand Police and the New Zealand Security Intelligence 
Service. 





counter-terrorism effort 


Counter-terrorism activities undertaken by relevant Public 
sector agencies to detect terrorists and disrupt their 
organisation, planning, preparation and attacks. 





counter-terrorism 


A framework used to guide the activities of the Public sector 











strategy agencies involved in the wider counter-terrorism effort. 

Da’ish Arabic acronym for the Islamic State of Iraq and the Levant 
(ISIL), also known as the Islamic State of Iraq and Syria (ISIS). 
An Islamist extremist terrorist organisation. 

dark web Part of the internet that is not visible to search engines and 
requires the use of specialist anonymising software to access. 

deconfliction A process that enables agencies to be aware of each other’s 


activities where they are investigating the same subject of 
interest. 





directive leadership 


Involves a leader setting clear directions, objectives and 
expectations. 





Director-General 

of the Government 
Communications Security 
Bureau 


The chief executive of the Government Communications 
Security Bureau. This is a statutory title defined in the 
Intelligence and Security Act 2017. 





Director-General of 
Security 


The chief executive of the New Zealand Security Intelligence 
Service. This is a statutory title defined in the Intelligence and 
Security Act 2017. 





domestic terrorism 


Terrorism or terrorist activity that occurs in New Zealand. 


We note that this may differ from definitions used by others, 
including New Zealand’s counter-terrorism agencies. 
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Term 


far right 


Definition 


A range of views and ideologies that are underpinned by a 
strong form of nationalism that holds that Western civilisation 
and its values are under threat form non-native people 
(particularly immigrants) and ideas (such as multiculturalism). 
Both the radical right and the extreme right-wing fit under the 
broad umbrella of the far right. 


We do not use a hyphen for far right even when it is being used 
as an adjective. 





Five Eyes 


The intelligence sharing partnership between Australia, Canada, 
New Zealand, the United Kingdom and the United States of 
America. 





“full take” collection 


A phrase used by the Government Communications Security 
Bureau meaning collection and storage of all communications 
data collected from a communications link, before irrelevant or 
unwanted information has been filtered out. 





human intelligence 
(HUMINT) 


Information derived from covert human sources, private 
individuals who volunteer information, face-to-face meetings 
with individuals, community engagement and communications. 





intelligence and security 
agencies 


The Government Communications Security Bureau and the 
New Zealand Security Intelligence Service. 


This is a statutory term under the Intelligence and Security Act 
2017. 





international terrorism 


Terrorism or terrorist activity that occurs outside New Zealand. 


We note that this may differ from definitions used by others, 
including New Zealand’s counter-terrorism agencies. 





Internet Protocol address 
(IP address) 


A unique number linked to each device connected to a 
computer network that uses the Internet Protocol for 
communication. 





lone actor terrorist 


A single person operating alone to plan and carry out a terrorist 
attack. 





metadata 


Information about other data, such as the date the data was 
created, who created it, and who can access it. 
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Term 


mobilisation 


Definition 


The process by which a radicalised person moves from an 
extremist intent to preparatory steps to engage in terrorist 
activity, such as researching potential targets, training or 
increased use of concealment behaviour. 





New Zealand Intelligence 
Community 


The Government Communications Security Bureau, the 
New Zealand Security Intelligence Service and the National 
Security Group of the Department of the Prime Minister and 
Cabinet (including the National Assessments Bureau). 





Officials’ Committee for 
Domestic and External 
Security Coordination 
(ODESC) 


The primary governance board overseeing New Zealand’s 
national security and resilience. Its main role is the 
identification and governance of national security risk. 

It is chaired by the Chief Executive of the Department of the 
Prime Minister and Cabinet. 





operational security 


Awareness and minimisation of behaviours that might attract 
attention from Public sector agencies. 





Performance 
Improvement Framework 


A tool, developed by the central agencies, for Public sector 
agencies and their chief executives to improve the performance 
of a Public sector agency. 





Performance 
Improvement Framework 
review 


A review of a Public sector agency completed by independent 
reviewers using the Performance Improvement Framework. 





Public sector agency 


In general, an organisation that works for the government 
of New Zealand. 


In this report, “Public sector agencies” means the 
217 organisations listed in the appendix. 





Public sector agencies 
involved in the 
counter-terrorism effort 


The Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service. 





radicalisation 


The process through which people develop commitment to a 
particular extremist ideology. People can radicalise to violence 
when they come to see violence as a feasible tool to address 
their grievances. 
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Term 


radical right 


Definition 


Ideologies and beliefs that form part of the far right. Those on 
the radical right generally use democratic means to achieve 
their aims and do not openly endorse the use of violence as a 
legitimate tool to achieve their aims. 





right-wing extremism 


Ideologies and beliefs that form part of the far right. Those in 
the extreme right-wing often believe that democracy should 
be replaced, and they see non-democratic means, such as 
violence, as legitimate tools to achieve their aims. 


We use a hyphen for right-wing even when it is not being used 
as an adjective. 








risk The likelihood that a threat will occur, and the seriousness of 
consequences if it does. The more likely the threat and the 
more severe the likely consequences, the greater the risk. 

sanitisation Removing sensitive information (often by rewording the 


language) from a document so that it can be more widely 
distributed. 





sensitive information 


Information that, if disclosed, would be likely to cause 

damage to the security or defence of New Zealand, or to the 
New Zealand government’s international relations, or prejudice 
the maintenance of the law or endanger the safety of a person. 





signals intelligence 
(SIGINT) 


Information derived from electronic communications (“signals” 
such as phone calls and emails), the primary component of 
which is communications intelligence (COMINT). 





social licence 


The ability of a business, organisation or government to do its 
work because it has the ongoing approval or acceptance of 
society to do so. 





target hardening 


A term used by law enforcement, security and military 
personnel to refer to the strengthening of a building or 
installation in order to protect it in the event of an attack. 

This can include security measures like installing closed-circuit 
television (CCTV) and alarms. 





terrorist cell 


A small semi-independent or entirely separate unit of a larger 
terrorist organisation. 





threat 


A source of potential damage or danger. 
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Term 


threatscape 


Definition 


The threat environment. 





Tor browser 


Software that allows users to surf the web anonymously by 
concealing the user’s location as well as what they are looking 
at online. It can also be used to access the dark web. 





tradecraft 


Operational (often secret) practices. 





Virtual Private Network 
(VPN) 


Software that allows the user to create a secure connection to 
another server over the internet. Once connected, the user can 
browse the internet using that server. In doing so, the user is 
provided with an Internet Protocol (IP) address associated with 
the different server, which hides the user’s location. 





wider counter-terrorism 
effort 


Public sector agencies that contribute to or support the 
counter-terrorism effort, including: 


- the agencies involved in the counter-terrorism effort 
(the Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service); and 


- agencies who can play a role in supporting counter-terrorism 
activities where it overlaps with their functions, including 
Public sector agencies (such as the Department of Internal 
Affairs, the Ministry of Education and the Ministry of Foreign 
Affairs and Trade). 





wider New Zealand 
Intelligence Community 


The group of Public sector agencies that collect, assess or 
otherwise use intelligence and those agencies that collect 
and/or use intelligence for external or domestic policy and 
operations. 


This includes agencies in the New Zealand Intelligence 
Community (the National Security Group of the Department 
of the Prime Minister and Cabinet, the Government 
Communications Security Bureau and the New Zealand 
Security Intelligence Service) and other agencies such as the 
Department of Corrections, Immigration New Zealand, the 
Ministry for Primary Industries, New Zealand Customs Service, 
the New Zealand Defence Force and New Zealand Police. 
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Chapter 1: Introduction 


1.1. Overview 


Earlier in our report we explained how over the last 30 years the diversity of the 

New Zealand’s population has increased significantly in terms of ethnicity, culture, 

gender identities, religion, values, languages spoken, ages, sexual orientation and whanau 

structure (see Part 2: Context). New Zealand has been described as a “superdiverse” 

country. Superdiversity means “a substantial increase in the diversity of ethnic, minority 
994 


and immigrant groups in a city or country”.’ One indicator of superdiversity is that a quarter 
of New Zealand’s population was born overseas. 


New Zealand is generally regarded as a country with a high level of social cohesion, but 
underlying vulnerabilities and issues remain that are yet to be fully addressed.” Sir Peter 
Gluckman, Director of New Zealand think tank Koi Tu: The Centre for Informed Future, told 
us that “social cohesion is a critical asset for New Zealand and all New Zealand peoples”, 
suggesting it was something to value, grow and protect and, critically, invest in. 


Our Terms of Reference directed us to make recommendations about how Public 
sector systems or operational practices should be improved to ensure the prevention 
of terrorist attacks in the future. 


In later chapters of this Part we discuss: 

a) leadership and oversight in building social cohesion (chapter 2); 

b) leadership of embracing New Zealand’s increasing diversity (chapter 3); 
c) hate speech and hate crime (chapter 4); and 

d) responses to questions asked by the community (chapter 5). 


In this Part we discuss government social cohesion initiatives and how Public sector 
agencies have recognised, adapted to and embraced New Zealand’s changing demographics. 
These issues were not part of our original work plan. As our inquiry progressed and they 
were raised with us repeatedly by affected whanau, survivors and witnesses, communities 
and experts, it became clear that these issues have a role to play in Reduction, Readiness 
and Recovery activities in the counter-terrorism effort and in building the resilience of 
communities. Our inquiry into the government’s social cohesion initiatives and adaptation 
to New Zealand’s increasing diversity was not as extensive as that conducted into the 
counter-terrorism effort (see Part 8: Assessing the counter-terrorism effort). However, it was 
sufficient to give us an understanding of the issues. 





" Paul Spoonley Superdiversity, Social Cohesion, and Economic Benefits (IZA World of Labour, May 2014) at page 1. 


? Paul Spoonley, Peter Gluckman, Anne Bardsley, Tracey McIntosh, Rangimarie Hunia, Sarb Johal and Richie Poulton He Oranga 
Hou: Social cohesion in a post-COVID world (Koi Tu: The Centre for Informed Futures, The University of Auckland, May 2020) 
https://informedfutures.org/wp-content/uploads/Social-Cohesion-in-a-Post-Covid-World.pdf. 
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While we recognise that diversity has many facets, in this Part we focus on New Zealand’s 
ethnic and religious diversity because this is of most relevance to our inquiry. New Zealand’s 
Muslim communities are more ethnically diverse than many people appreciate (for example, 
affected whanau, survivors and witnesses of the terrorist attack represent around 50 different 
countries of origin). We do not explore other kinds of diversity in New Zealand such as 
gender identity, age, sexual orientation and disability. 


In what follows in this chapter we provide a context for later chapters by explaining: 
a) social cohesion, social inclusion and community engagement; 
b) opportunities and challenges associated with New Zealand’s diversity; and 


c) New Zealand’s response to demographic change. 


1.2 Social cohesion 


There have been many definitions of social cohesion, most of which are associated with 
wellbeing. We use the definition developed by Professor Paul Spoonley, Robin Peace, 
Andrew Butcher and Damian O’Neill, which describes a socially cohesive society as one 
in which all individuals and groups have a sense of: 


a) belonging - asense of being part of the community, trust in others and respect for 
law and human rights; 


b) inclusion - equity of opportunities and outcomes in work, income, education, health 
and housing; 


c) participation - involvement in social and community activities and in political 
and civic life; 


d) recognition - valuing diversity and respecting differences; and 
e) legitimacy - confidence in public institutions.* 


For Maori, social cohesion means a collective sense of identity and belonging (as Maori), 
which is respected by broader society as a whole. Sir Mason Durie’s work emphasises 
the importance of the ability to live as Maori and Maori determining the many facets 

of what being Maori means.* 





w 


Paul Spoonley, Robin Peace, Andrew Butcher and Damian O’Neill “Social Cohesion: A Policy and Indicator Framework for 
Assessing Immigrant and Host Outcomes” (April 2005) 24 Social Policy Journal of New Zealand at pages 98-99. 


a 


Mason Durie “Measuring Maori Wellbeing” (2006) New Zealand Treasury Guest Lecture Series https://www.treasury.govt.nz/ 
sites/default/files/2007-09/tgls-durie. pdf. 
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In New Zealand, social cohesion must be founded on upholding Te Tiriti o Waitangi. 
It is not about making all New Zealanders the same. It is an inclusive concept that values 
communities and individuals coming together, where: 


a) they respect each other and the differences they bring; and 
b) they develop some shared values, norms and experiences. 


Social cohesion exists where people feel part of society, family and personal relationships 
are strong, differences among people are respected and people feel safe and supported by 
others. Social cohesion is an ideal rather than a goal to be achieved and must continually be 
nurtured and grown. 


Social cohesion has broad benefits for society and is an important contributor to long-term 
prosperity. One commentator suggests that because cohesive societies are politically stable, 
they can focus on economic growth and business development.’ Other commentators 
indicate that a cohesive society: 


a) is mutually supportive of its members, enabling them to pursue common goals by 
democratic means; and 


b) develops ways of coping with stresses and divisions in an open democratic manner 
(for example, disparities of wealth or ethnic or cultural diversity).°® 


Social cohesion can contribute to preventing or countering extremism. This is because 
cohesive and resilient communities are better placed to resist and counter the risk 

of radicalisation and mobilisation to violent extremism and terrorism. Tolerant, and 

ideally inclusive, societies are more able to address and prevent the polarisation and 
disenfranchisement that can contribute to a rise in extremism. However, social cohesion 
should be pursued separately from New Zealand’s counter-terrorism efforts as it is important 
in itself and has wider social, economic and cultural objectives. As well, undertaking social 
cohesion activities as a tool to counter extremism may have the effect of stigmatising and 
alienating some members of communities, thereby undermining the aims of social cohesion 
work. 





5 Jo Ritzen and Michael Woolcock “Social Cohesion, Public Policy, and Economic Growth: Implications for Countries in Transition” 
(Paris, 26-28 June 2000) Annual Bank Conference on Development Economics. 


8 Ministry of Social Development Social Inclusion in New Zealand - Rapid Evidence Review (May 2020) https://www.msd.govt.nz/ 
about-msd-and-our-work/publications-resources/research/social-inclusion-in-new-zealand-a-rapid-evidence-review/index.html. 
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1.3 Social inclusion 


Social inclusion is the process of improving how individuals and groups participate in and 
contribute to society on their own terms. 


For New Zealand it is important to acknowledge that Te Tiriti o Waitangi and the evolving 
Maori-Crown relationship must underpin any social inclusion processes. That is, any such 
processes must be based on New Zealand’s bicultural foundations while welcoming and 
supporting our increasingly vibrant and diverse population as an ongoing strength. 


1.4 Community engagement 


Community is a word used to convey notions of social relationships, cultural values and 
belonging or having something in common. We use the term community in this report 
broadly to include groups of people that may come together, for example, in terms of locality, 
religion, ethnicity, occupation, special interest or online. 


Community engagement is the process of working with a community or communities to 
address issues affecting their wellbeing. The process of community engagement is focused 
on building enduring, trusted relationships. According to the International Association for 
Public Participation, “community engagement ... is now accepted as a standard component 
of any significant project as much as traditional disciplines as planning, development and 
implementation”.’ 


Public sector agencies in New Zealand use feedback received through community 
engagement to inform policy development, service design and decision-making. We use 
the term community engagement, rather than “public consultation”. We are aware that 
many laws provide for public consultation as determined by the particular legislative regime 
and case law. For example, the Public Service Act 2020 imposes an obligation on a chief 
executive to undertake public consultation on a long-term insights briefing (information 

and analysis on medium and long-term trends, risks and opportunities that may affect 

New Zealand society) and take any feedback received into account when finalising the 
briefing.® Consultation is only one form of community engagement, see below. 


In 2013, New Zealand signed up to the Open Government Partnership. That Partnership is 
about strengthening democracy in New Zealand by ensuring that citizens can contribute and 
influence what government does and how it does it. As part of that Partnership, New Zealand 
committed to “develop a deeper and more consistent understanding within the New Zealand 
public sector of what good engagement with the public means”.° 





nN 


International Association for Public Participation Australasia Quality assurance standard for community and stakeholder 
engagement (2015) https://iap2.org.au/wp-content/uploads/2019/07/IAP2_Quality_Assurance_Standard_2015.pdf. 


© 


Public Service Act 2020, Schedule 6, clause 9. 


© 


Open Government Partnership New Zealand National Action Plan 2018-2020 (2018). 
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20 The International Association for Public Participation sets out good practice for engagement. 
It includes a set of core values, suggesting that public participation should: 


a) be based on the belief that those who are affected by a decision have a right to be 
involved in the decision-making process; 


b) include the promise that the public’s contribution will influence the decision; 


c) promote sustainable decisions by recognising and communicating the needs and 
interests of all participants, including decision-makers; 


d) seek out and facilitate the involvement of those potentially affected by, or interested 
in, a decision; 


e) seek input from participants in designing how they participate; 


f) provide participants with the information they need to participate in a meaningful way; 
and 


g) communicate to participants how their input affected the decision."° 


21 The purpose of these core values is to “help make better decisions which reflect the interests 
and concerns of potentially affected people and entities”. We set out the different types 
of engagement below, drawing on the JAP2 Public Participation Spectrum" but with some 
additional information and adaptation to make them more relevant to New Zealand: 
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1° International Association for Public Participation IAP2 Core Values for Public Participation (2020). 


"International Association for Public Participation IAP2 Public Participation Spectrum (2020). 
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Figure 48: Levels of community engagement 


EMPOWER Communities make decisions. The government SIGNIFICANT IMPACT 
implements the decisions made by communities. Communities’ interests 
are significantly affected. 
Communities’ interests 
are central and other 
interests are limited. 


COLLABORATE The government and communities partner to design 
the process, determine the issue or problem and 
develop solutions. The government and communities 
make joint decisions. 


INVOLVE The agency and communities work together MODERATE IMPACT 
to identify the issues and develop solutions. 
Communities are involved in the decision-making 
process but the government ultimately decides. 


Communities’ interests are 
affected, but wider interests 
take priority. Specific 
interests are affected. 


CONSULT The agency seeks communities’ feedback on drafts 
and proposals. The government makes decisions 
having regard to the feedback. Communities are kept 
informed, their concerns and aspirations are listened 
to and they receive feedback on how their input 
influenced the decision. 


INFORM The agency informs communities about what MINOR IMPACT 
is happening. Communities are provided with 
balanced and objective information to assist 
them to understand the issue, alternatives, 
opportunities and/or solutions. 


Communities’ interests are 
limited or not affected in 
any special way. 





The International Association for Public Participation also sets out a quality assurance 
process” for community and stakeholder engagement that involves a number of steps 
outlined in the figure below. 





® International Association for Public Participation, footnote 7 above at pages 16-25. 
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Table 14: Quality assurance process for community and stakeholder engagement 


Step 


Problem definition 


Actions 


Clearly defining the purpose of the engagement and why the planned engagement 
is occurring. This requires clear objectives and rationale for the engagement, 
identifying the issues to be addressed, the communities affected, the ideal outcome 
the decision-makers have identified and who decides when a resolution has been 
achieved. 





Agreement of purpose or 
context and identification 
of negotiables and 
non-negotiables 


Clearly articulating the context and objectives of engagement, where there are 
opportunities for community influence and input and the non-negotiable elements 
of decision-making. 





Level of participation 


Determining the level of influence will be apparent based on the goals of engagement. 
Various degrees of participation are appropriate and legitimate depending on the 
context and purpose of the decisions being made. 





Stakeholder 
identification 
and relationship 
development 


Identifying those who are directly involved or affected, are likely to be affected 

or impact the project outcome and those who need a voice. Once identified, it is 
necessary to understand the interests, values and needs of each stakeholder group, 
including expectations and potential points of conflict. This step will inform the 
communication and engagement techniques appropriate to the project. 





Project requirements 


Considering the specific requirements of the project that will influence the 
methodology used in engagement. Requirements include timeliness, statutory 
and policy requirements, reporting and resource constraints. 





Development and 
approval of 
engagement plan 


Clearly setting out the way stakeholder groups will be involved in influencing 

the project. The engagement plan will set out matters such as the purpose 

and objective of engagement, engagement activities, resources required, 

a risk management plan, roles and responsibilities of the project team, reporting 
mechanisms and evaluation points. 





Execution of 
engagement plan 


Engagement should be undertaken as set out in the engagement plan. 





Feedback 


Providing information to stakeholders about how engagement outcomes will 
inform decision-making. Feedback needs to be collated and made available to all 
stakeholders involved in the engagement. 





Evaluation and 
review 


Reviewing engagement to determine whether it has met the identified requirements, 
achieved the objectives and whether further engagement is required. 





Monitoring 


Ongoing monitoring and review at regular intervals is necessary to ensure 
engagement is effective and should be used to influence continuous improvement 
of engagement practices. 





Documentation 
of evidence 


Documentation relating to the steps set out above is important for auditing, 
to ensure engagement processes can be assessed for quality assurance. 
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1.5 Opportunities and challenges associated with New Zealand’s 
diversity 


New Zealand’s population is growing more diverse and is projected to become even more 
so in the next 20 years (see Part 2: Context). New Zealand’s increasing diversity brings 
both opportunities and challenges for communities. Professor Paul Spoonley says that a 
substantial increase in the scale and scope of ethnic groups in a region can provide certain 
economic benefits, such as: 


a) higher productivity and innovation for regions and cities with large immigrant 
populations; 


b) an environment for the cross-fertilisation of ideas that contributes to creativity and 
innovation; 


c) investments and increased local aggregate demand created by diversity encouraging 
product and process innovation; and 


d) reflecting and contributing to new global connections and a local or international 
cosmopolitanism. 


However, there are challenges: 


a) Superdiversity challenges the assumptions and practices of a shared civic culture and 
citizenship, and raises concerns about social cohesion. 


b) Anxieties about the growing diversity of labour markets and communities have been 
associated with discrimination and anti-immigrant politics. 


Professor Paul Spoonley suggests that public policy is critical in addressing these points 

in order to realise the benefits of diverse populations through “support for intercultural 
dialogue, adopting anti-discrimination laws, improving credentials recognition, promoting 
language training and job search techniques and ameliorating disadvantage that impedes 
social mobility”. 


Similarly, the Superdiversity Centre for Law, Policy and Business published a report in 2015 on 
the impact of increased diversity on business, the government and New Zealand noting that: 


a) the government needs to move faster on diversity - government is responding more 
slowly to New Zealand’s superdiversity than business; 


b) even when superdiversity is considered, it is sometimes an afterthought, tacked on to 
mainstream policies and campaigns with minimal budgets attached; 


c) many of the challenges posed by ethnic diversity are not new, such as discrimination 
against ethnic minorities; 





3 Paul Spoonley, footnote 1 above. 
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d) the transition to superdiversity represents a much larger and permanent change in 
New Zealand’s demographic make-up compared to those of most Western countries; and 


e) the challenges faced by migrants when interacting with Public sector agencies and the 
law are unique, and laws and policies need to take that into account." 


Public sector agencies, local government, civil society and community groups all play a role 
in finding ways to bring people together to build trust and confidence between communities 
and institutions.” 


1.6 New Zealand’s response to demographic change 


There are different views on how well New Zealand is responding to its demographic change. 
Stats NZ’s Wellbeing statistics: 2018 showed that nearly 90 percent of those New Zealanders 
who responded to the General Social Survey felt comfortable or very comfortable about a 
new neighbour who was a different ethnicity or religion to themselves.” 


On the other hand, there is evidence that some communities in New Zealand experience 
attitudes or harmful behaviours that make them feel less included or valued. 


In 2012 the Human Rights Commission revealed that structural and institutional racism and 
discrimination existed in New Zealand across health, education, employment, income and 
justice outcomes, and in the Public service. Common elements found across these outcomes 
were: 


a) entrenched ethnic inequalities (for example, in health and educational outcomes); 


b) the cumulative effect of discrimination, as discrimination at one stage or one system 
can flow on to other stages and systems (for example, barriers in early childhood 
education contribute to poor educational outcomes at higher levels); 


c) biased practice by practitioners, including doctors, teachers, New Zealand Police, 
judges and Public sector employees; 


d) an assumption that everyone has equal access to services, which ignores the barriers 
that some members of society experience; and 


e) insufficient or poor quality data collection on ethnicity.” 





“4 Mai Chen Superdiversity Stocktake: Implications for Business, Government and New Zealand (Superdiversity Centre for Law, 
Policy and Business, Auckland, 2015) 


8 Michele Grossman, Mario Peucker, Debra Smith and Hass Dellal Ao Stocktake Research Project: A systemic literature and 
selected program review on social cohesion, community resilience and violent extremism 2011-2015 (Victoria University and 
Australian Multicultural Foundation, 2016); Shandon Harris-Hogan, Kate Barrelle and Andrew Zammi “What is countering violent 
extremism? Exploring CVE policy and practice in Australia” (2016) 8(1) Behavioral Sciences of Terrorism and Political Aggression 
at page 6; Peter Romaniuk Does CVE Work? Lessons Learned From the Global Effort to Counter Violent Extremism (Global Center 
on Cooperative Security, 2015); Canada Centre for Community Engagement and Prevention of Violence National Strategy on 
Countering Radicalisation to Violence (2018). 


Stats NZ Wellbeing statistics: 2018 (2018) https://www.stats.govt.nz/information-releases/wellbeing-statistics-2018. 


New Zealand Human Rights Commission A fair go for all? Rite tahi tatou katoa? Addressing Structural Discrimination in 
Public Services (2012). 
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There is clear evidence that many communities, including ethnic and religious communities, 
are socially excluded in New Zealand. A 2020 report by the Ministry of Social Development 
confirmed that: 


... there is consistent evidence of: 


- persistent and marked disparities in New Zealanders’ attitudes towards selected 
social groups. Data captured annually through the New Zealand Attitudes and Values 
survey, for example, shows that New Zealanders overall consistently rate European 
New Zealanders more favourably than a range of other social groups 


- Data from Stats NZ’s 2016 General Social Survey shows that approximately 17 per cent 
of all New Zealanders report having experienced discrimination in the last 12 months. 
Compared to this overall rate, the rates are markedly higher for younger people 
(e.g. 24% of 15-24 year olds), women (19.3%), the unemployed (27.3%), people who 
do not own their own home (21.8%), single parents (26.9%), recent migrants (25.8%), 
non-Europeans (e.g. 22.7% of Maori and 24.3% of Asians) and people with a 
disability (21.9%). 


- Onbalance, the evidence points to a very mixed picture about the extent of social 
inclusion within New Zealand. Although a majority of New Zealanders claim to be 
accepting of diversity, there are still substantial numbers of New Zealanders who are left 
behind and marginalised because of discrimination and prejudice. Some commentators 
also note not only a lack of awareness but also a reluctance to acknowledge the extent 
of the problem.” 


Attitudes or harmful behaviours that reduce social cohesion and inclusion have particular 
impact for Muslim communities. The 11 September 2001 terrorist attacks in the United States 
of America by Islamist extremists have given Muslim communities unwelcome visibility 

in many Western democracies. Muslim communities have become subjected to both the 
attention of intelligence and security and law enforcement agencies and negative comments 
and harassment from members of the wider community. 


For Muslim communities in New Zealand, this has led to a perception that they are 
persistently placed in a one-dimensional frame by both wider society and the Public sector 
agencies that are responsible for the support and protection of all New Zealanders. 

That frame has been referred to as “securitisation” by those who made submissions to us. 
Securitisation means that, as a group, Muslim individuals and communities are primarily 
seen as a potential threat to New Zealand’s national security. 





8 Ministry of Social Development, footnote 6 above at page 18. 
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34 A study in the United Kingdom about the portrayal of Muslim communities in the media and 
the impact of that coverage observed that: 


The evidence shows an overwhelmingly negative picture, where threat, otherness, fear and 
danger posed or caused by Muslims and Islam underpins a considerable majority of the 
media’s coverage. Given that 64% of the British public claimed that what they know about 
Muslims and Islam is acquired through the media, then it could be that such a stream 

of negativity ... has the potential to then ensure stigmatisation, marginalisation and 
intolerance.” 


35 The role of the media in perpetuating stereotypes has been recognised at the international 
level: 


The media often perpetuates ... stereotypes by disseminating or providing a platform for 
racists and xenophobic speech. The Special Rapporteur would also like to highlight that 
media bias is a particularly problematic phenomenon in a counterterrorism context. The 
disproportionate coverage of certain types of terrorism, the use of certain terminology or 
images and the overall framing of news stories about terrorism distorts public perception. 
A recent study examined the domestic media coverage of terrorist attacks that occurred in 
one North American country during the period 2011-2015. The study found that attacks 

by Muslim perpetrators, particularly foreign-born Muslims, received 4.5 times more 
coverage than other attacks. Only a small proportion of attacks were perpetrated by 
Muslims (12.4 per cent) or foreign-born Muslims (5 per cent). Yet, these attacks received 
44 per cent and 32 per cent of the news coverage, respectively. Research also found that 
an attack is more likely to be considered an act of terrorism when carried out by a Muslim. 
By contrast, threats posed by right-wing violence are often underestimated and not 
considered to be terrorism.”° 
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"9 Dr Chris Allen Written evidence to the All Party Parliamentary Group on Islamophobia post-Woolwich 2013 (15 July 2013), cited 
in Elizabeth Arif-Fear Muslims in the Media: Are we bridging or building divides? (20 May 2079) https://faithbeliefforum.org/ 
muslims-in-the-media-are-we-bridging-or-building-divides/. 

° United Nations Report of the Special Rapporteur on contemporary forms of racism, racial discrimination, xenophobia and 
related intolerance (2017) A/72/287 https://digitallibrary.un.org/record/1304009?|n=en. 
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A 2020 Comparative study of attitudes to religious groups in New Zealand found that: 


One plausible explanation for the patterns revealed in our results is media effect: prejudice 
arises from the perceived threat of Muslim radicals. Indeed, Shaver et al. (2017) found that 
greater media exposure predicted greater anti-Muslim prejudice. 


The importance of the media’s role in strengthening or weakening prejudice is likely 
exacerbated by a general lack of knowledge and education on different religions, and a lack 
of contact between most New Zealanders and diverse religious groups: Muslims comprise 
only 1.3% of the population and Buddhists 1.1% ([Stats NZ] 2019). This means that for many 
New Zealanders the media provides their only exposure to religious diversity.” 


The study also found: 


... substantially greater perceived threat and negativity towards Muslims compared with 
other groups. In particular, older people, New Zealand Europeans, men, and those with 
more right-wing attitudes report greater threat and negativity towards Muslims. In line 
with previous studies, higher religious identification and higher education predict greater 
acceptance. Taken collectively, these results reveal that the Muslim Acceptance Gap in 
this country is substantial, and greater challenges for acceptance are evident among 
lower-educated, right-wing, older, secular, and male populations. The magnitude of this 
gap reveals a substantial challenge to the future of New Zealand where religious and 
secular people can live without evoking prejudice. 


Another 2020 article Prejudice toward Muslims in New Zealand: Insights from the 

New Zealand Attitudes and Values Study by Chris G Sibley and others noted that 

New Zealanders have felt “less warmth” towards Muslim communities than other groups in 
New Zealand every year since the New Zealand Attitudes and Values survey started in 2012.” 





?" Lara M Greaves, Aarif Rasheed, Stephanie D’Souza, Nichola Shackleton, Luke D Oldfield, Chris G Sibley, Barry Milne and Joseph 
Bulbulia “Comparative study of attitudes to religious groups in New Zealand reveals Muslim-specific prejudice” (2020) 15(2) 
Kotuitui: New Zealand Journal of Social Sciences Online. 

» Chris G Sibley, M Usman Afzali, Nicole Satherley, Anastasia Ejova, Samantha Stronge, Kumar Yogeeswaran, Michael Grimshaw, 
Diala Hawi, Zahra Mirnajafi, Fiona Kate Barlow, Petar Milojev, Lara M Greaves, Sarah Kapeli, Elena Zubielevitch, Logan Hamley, 
Maria C Basabas, Marvin H Wu, Chloe Howard, Carol HJ Lee, Yanshu Huang, Christopher Lockhart, Joaquin Bahamondes, Sam 
Manuela, Taciano L Milfont, Ryan Perry, Nikhil K Sengupta, Nickola C Overall, John H Shaver, Geoffrey Troughton, Danny Osborne 
and Joseph Bulbulia Prejudice toward Muslims in New Zealand: Insights from the New Zealand Attitudes and Values Study (July 
2020). 
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1.7. Concluding comments 


It is not possible or desirable to expect everyone in society to think and behave in the same 
way. That sort of uniformity is not what we mean when we talk about social cohesion. 

Nor do we mean that marginalised communities should conform to majority cultural 

values and practices - in other words, to assimilate. Instead we see social cohesion as 
enabling everyone to belong, participate and have confidence in public institutions. This 
requires recognition and respect of diversity and valuing differences leading to equitable 
opportunities and outcomes in work, income, education, health, housing etc. Inclusion is a 
measure of how a society enables that diversity to thrive. 


In the Public sector, we observe that social cohesion has (incorrectly) come to be perceived 
as implying social uniformity achieved through assimilation. For this reason Public sector 
agency documents have recently used the narrower term social inclusion rather than the 
broader term social cohesion. 


In chapter 2 we look at leadership and oversight of social cohesion at the political and 
Public sector agency level. In chapter 3 we focus on Public sector efforts to embrace 

New Zealand’s increasing diversity, which we see as an important component of enhancing 
social cohesion. This is primarily through workforce capacity and capability and how the 
Public sector is structured to respond to New Zealand’s diverse populations. In chapter 4 
we address hate speech and hate crime, which are the unacceptable consequences of 
non-inclusive and non-cohesive aspects of our society and unwillingness by some to 
embrace diversity. 


A series of themes have emerged as a result of our inquiries, which we explore through 
the rest of this Part: 


a) There has been limited political leadership and public discussion of social cohesion, 
inclusion and embracing diversity. 


b) There has been no overarching strategy and little strategic analysis. 

c) Public sector leadership and coordination have been diffuse. 

d) Community engagement processes have been limited and poor. 

e) Public sector support for community capacity development has been ad hoc. 

f) Data collection and analysis and monitoring and evaluation are underdeveloped. 


g) Public sector workforce capacity and capability to embrace diversity are far from 
complete. 
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Chapter 2: Leadership and oversight in 
building social cohesion 


2.1 Overview 


We heard many times during our community engagement process of the importance of social 
cohesion. Many people told us that social cohesion was an ongoing process of developing 
those common values that are shared by New Zealanders, and equal opportunities. It was 
not about society becoming homogenous. 


In this chapter we examine the government’s approach to social cohesion under the following 
headings: 


a) Political leadership and public discussion. 

b) Public sector leadership, coordination and strategy. 

c) Public sector-led community engagement. 

d) Public sector support for community capacity development. 
e) Community-led initiatives supporting social cohesion. 


f) Oversight and performance monitoring. 


2.2 Political leadership and public discussion 


In New Zealand, prime ministers and ministers rarely publicly discuss social cohesion 

and diversity issues. They seldom speak about the benefits of New Zealand’s changing 
demographics including ethnic and religious diversity and the related social benefits of 
social cohesion. Much of the limited discussion on New Zealand’s increasing ethnic diversity 
focuses on the economic reasons for, and consequences of, immigration and migrant labour. 


Before 15 March 2019, there was no informed broader public discussion led by ministers 
about the benefits of the government efforts to build social cohesion or the roles that local 
government, civil society and community groups can have in bringing people together to 
build trust and confidence between communities and institutions. 


2.3 Public sector leadership, coordination and strategy 


We have examined Public sector leadership through both Public sector architecture and 
policies and programmes. 


Central to our review of the Public sector social cohesion efforts is the Office of Ethnic 
Communities due to the role it played prior to 15 March 2019 in leading social cohesion 
initiatives, which we discuss here. The roles of other Public sector agencies in embracing 
diversity are discussed in chapter 3. 
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Office of Ethnic Communities 


The Office of Ethnic Communities is the government’s principal advisor on ethnic 
communities. Originally established in 1992, its name and focus have evolved but it remains 
a business unit within the Department of Internal Affairs. 


The Department of Internal Affairs is a comparatively large organisation and responsible to 
several ministers including those responsible for internal affairs, government digital services, 
local government, community and voluntary sector, racing and ministerial services. 


The Office of Ethnic Communities provides information, advice and services to ethnic 
communities. Its mandate includes “migrants, former refugees, long-term settlers, and 
those born in New Zealand who identify their ethnicity as African, Asian, Continental 
European, Latin American and Middle Eastern”. We were told that it has no specific role 
in relation to religious communities, but it does engage with the ethnic groups that make 
up Muslim communities. One of its stated objectives is to influence the development and 
implementation of government policies to better meet the needs of ethnically diverse 
communities and ensure equity of opportunity and outcome. 


The Office also administers the Ethnic Communities Development Fund of $520,000 per 
annum. The Fund was originally a programme called Settling In developed by the Ministry of 
Social Development in 2014 to assist refugees and migrant communities. Responsibility for 
Settling In was transferred to the Office of Ethnic Communities and it was re-branded as the 
Ethnic Communities Development Fund. 


Before 15 March 2019, the Office of Ethnic Communities had 26 full-time equivalent positions 
spread across its three offices in Auckland, Wellington and Christchurch. The Office of 
Ethnic Communities had three teams: 


a) Community Engagement - the team had nine full-time equivalent positions - one 
manager, and eight diversity and engagement advisors. Due to vacancies, it only had five 
diversity and engagement advisors to work across the more than 200 ethnic communities 
in New Zealand. These limited resources were focused on community capability 
development and funding small community projects and events. 


b) Policy - the team had seven full-time equivalent positions. Its function was to influence 
the development and implementation of policy and service delivery to create better 
outcomes for ethnic communities and New Zealand as a whole. 


c) Planning, Systems and Services - the team had nine full-time equivalent positions. It 
provided administrative and procedural support, managed stakeholder engagement and 
managed and delivered some direct services including the Nominations Service and the 
Ethnic Communities Development Fund. 
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The Director of the Office of Ethnic Communities was a third tier role reporting to the 
Deputy Chief Executive, Policy, Regulation and Communities. 


The Office of Ethnic Communities has been repeatedly recognised as underperforming. 

For example, a Department of Internal Affairs review of the Office of Ethnic Communities 

in 2014 was Critical of the limited nature of its activities, stating that it did not provide 
leadership on diversity issues across the Public sector, its overall strategy was poorly 
explained and it concentrated too much on operational matters. The review recommended 
that the Office of Ethnic Communities develop a clear strategy to guide its activity and 
support effective leadership on diversity issues across the Public sector.” 


In response to the review, the Office of Ethnic Communities was restructured in late 2014 to 
“improve the alignment of functionality and purpose and mitigate the challenges of leading 
a mix of operational, service delivery and policy functions”. The Department of Internal 
Affairs told us that “the restructure did not achieve the desired outcomes”. 


Concerns about the Office of Ethnic Communities persisted. It was restructured again in 2016 
to, among other things, build its policy capability, so that it could engage strategically with 
other Public sector agencies and better engage with ethnic communities. 


Before 15 March 2019 successive budget bids over a number of years to build capacity 
and capability of the Office of Ethnic Communities were turned down by the government 
of the day. 


Social cohesion strategy and policy programme 


Before 15 March 2019, no Public sector agency coordinated the overall policy approach or 
work programme relating to social cohesion, making it difficult to assess whether there were 
gaps in activities undertaken by government to build and maintain social cohesion. The 
Public sector’s decentralised approach to building social cohesion relies on the efforts within 
each agency. It was unclear which Public sector agency was responsible for the provision of 
coherent strategic advice on social cohesion at a whole-of-system level. 


There was no overarching strategy that could be used to set the purpose and direct 
government policy and programme settings. Social cohesion had emerged in some 
Public sector agencies as a “rallying call for greater consideration to be given to [migrant] 
settlement outcomes and equity and, therefore social relations and trust”. 





3 Department of Internal Affairs Office of Ethnic Affairs - Strategy Review, Report by MartinJenkins (2014). 


*4 Department of Internal Affairs Decision Document: Office of Ethnic Communities - Flourishing Ethnic Diversity, Thriving 
New Zealand (2016). 


75 Robin Peace and Paul Spoonley “Social Cohesion and Cohesive Ties: Responses to Diversity”(2019) 45 New Zealand Population 
Review at page 110 https://population.org.nz/app/uploads/2019/12/NZPR-Vol-45_Peace-and-Spoonley. pdf. 
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Policy work was undertaken on social cohesion in New Zealand around 2005 and resulted 
in a Cabinet paper that has had limited influence. As Robin Peace and Paul Spoonley say: 


It failed to survive in any coherent form, and it was not something that entered political, 
policy or public discourse as a serious policy priority.” 


There have been further attempts to coordinate social cohesion programmes and strategies 
across government. 


In 2015 Cabinet agreed to a social cohesion policy programme to lower the risk of violent 
extremism arising from “at-risk” communities. This was partly in response to a 2014 
United Nations Security Council Resolution that focused on reducing recruitment to violent 
extremism and promoting social inclusion and cohesion. 


In 2016 the Office of Ethnic Communities became the chair and leader of the newly formed 
cross-agency Community Strengthening Working Group. This group was intended to 

bring together, under the collective title Connecting with Communities, the community 
development activities of Immigration New Zealand, the Ministry of Social Development and 
New Zealand Police. The working group was renamed the Social Cohesion Working Group 
in mid-2016. A 2016 Budget bid for $23 million over four years to support a social cohesion 
programme to drive research and community-led initiatives was not successful. The Social 
Cohesion Working Group was disbanded in 2017. 


In early 2017 the Human Rights Commission, led by the then Race Relations Commissioner 
Dame Susan Devoy, met with the [Public] Service Commissioner Peter Hughes to raise 
concerns that Muslim communities had shared with the Human Rights Commission about 

a range of issues. These included harassment and bullying of Muslim children in school, 
concerns about the safety of Muslim communities in New Zealand, the negative portrayal of 
Muslim individuals and communities in the media, access to social workers, lack of culturally 
appropriate services for Muslim communities and lack of funding for Muslim projects. 


In response, selected Muslim leaders from national representative groups were invited to 
present their concerns to senior officials at a cross-government workshop on 23 March 2017. 
The workshop was jointly led by the Human Rights Commission and the [Public] Service 
Commission. Notes were taken of the meeting by officials but not shared or confirmed with 
the Muslim leaders who attended. 





?6 Robin Pearce and Paul Spoonley, footnote 25 above at page 110. 
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The workshop resulted in the formation of a Social Cohesion Governance Group to address 
Muslim communities’ concerns and other issues related to social cohesion. The Social 
Cohesion Governance Group was made up of deputy chief executives and co-chaired by 
representatives from the Department of Internal Affairs (rather than the Office of Ethnic 
Communities) and the [Public] Service Commission. A new Social Cohesion Working Group 
co-chaired by representatives from the same agencies was also established to provide 
advice to the Governance Group. There was no opportunity for participation by communities 
on either the Social Cohesion Governance Group or the Working Group. Nor was there 
engagement with communities on the development of the terms of reference or work 
programme. 


In June 2017 the Social Cohesion Governance Group agreed to pilot a project to engage 
with Muslim communities in Waikato which, if successful, could be replicated with other 
Muslim communities in New Zealand. This decision was made despite feedback from 
Muslim community leaders that the project was not needed for the Waikato region. Muslim 
community leaders suggested that their highest priority was the development of a national 
strategy but, if a pilot went ahead, it should be based in Auckland, where there was greater 
need. 


Implementing the pilot project took longer than expected. This resulted in further frustration 
on the part of the Muslim communities involved, the Human Rights Commission and the 
Race Relations Commissioner. 


By the end of October 2017 both the Social Cohesion Governance Group and the Working 
Group were suspended or defunct. A follow-up Department of Internal Affairs report to the 
[Public] Service Commissioner cited a number of reasons for lack of action including: 


a) the lack of a “high level story” that could bring together the social cohesion work of 
Public sector agencies; 


b) the definition of social cohesion was too broad, meaning that many programmes could 
qualify, which increased the difficulty of system-wide coordination; and 


c) social cohesion’s “awkward fit” with the counter-terrorism effort. Including social 
cohesion initiatives as part of work to counter violent extremism and terrorism presented 
problems. There was a difference between activities designed specifically to counter 
radicalisation (such as multi-agency intervention programmes like the Young Person’s 
Intervention Programme) and community-based activities designed to improve 
social cohesion (such as programmes working with refugee youth). It was felt that 
community-based cohesion activities should be led by Public sector agencies in the 
social sector outside the countering violent extremism and terrorism effort, as they have 
much broader aims to improve communities’ wellbeing. 
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The social cohesion pilot in Waikato commenced in March 2018, despite not being supported 
by local Muslim communities or a national representative group. An Office of Ethnic 
Communities employee was seconded to Hamilton for six months to lead the project and 

to “engage Hamilton ethnic and Muslim communities to share their perspectives of ideas 
and challenges they face”. The results of the project would then be used to inform and 
influence government policy, ensure Public sector agencies’ services were fit for purpose 
and culturally appropriate and identify practical solutions that were adaptable to various 
ethnic communities. To do this the Office of Ethnic Communities employee held interviews 
and group meetings with members of Hamilton’s ethnic communities between March and 
September 2018. 


The key findings from the pilot were that “local Hamilton ethnic and Muslim communities 
face challenges settling in New Zealand and there is a need for Public sector agencies to 
understand past experiences and lifestyles of migrants and refugees”. The report from the 
pilot made nine recommendations: 


a) Conduct and analyse a community survey to better understand the capacity development 
barriers, strengths and needs of ethnic communities. 


b) Support the capacity development needs and interests of organisations representing 
ethnic communities. 


c) Recognise ethnic community groups and their religious organisations as social 
connectors. 


d) Support communities to determine their own solutions to community issues. 
e) Prioritise investment in capacity development of ethnic communities. 


f) Develop closer relationships with tangata whenua and potential employers (for example, 
businesses) to identify career opportunities. 


g) Identify what skills employers are looking for and work with students to develop these 
skills and address any barriers to employment. 


h) Explore developing a cultural responsiveness framework for ethnic communities. 


i) Focus on building on community strengths rather than on addressing community deficits, 
for policy development purposes.” 


The Department of Internal Affairs told us that it has not yet completed implementing the 
recommendations arising from the pilot. 





7 Office of Ethnic Communities Final Report - Hamilton Social Cohesion Pilot (2018). 
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In the meantime, in May 2018 Muslim leaders had formed a Muslim Community Advisory 
Group to try to gain greater traction on the concerns they had raised with the Public sector 
the previous year. After meeting with the Department of Internal Affairs, the Ministry of 
Social Development and the [Public] Service Commission, the Muslim Community Advisory 
Group was asked to develop a business plan and budget to support their request for social 
worker resources to assist the community. 


Initially no support was provided to the Muslim Community Advisory Group by Public sector 
agencies. Subsequently, the Ministry of Social Development provided assistance to draft a 
business plan after the Muslim Community Advisory Group raised concerns about the time 
pressures and demands on community leaders working in a voluntary capacity. The Ministry 
of Social Development provided the Muslim Community Advisory Group with a draft of the 
business plan in February 2019. The draft business plan was described to us as a “cut and 
paste” of the work communities had previously provided to Public sector agencies, which 
“added little substance”. 


The Ministry of Social Development advised us that the business plan was not finalised prior 
to the 15 March 2019 terrorist attack and has not progressed further. 


Government programmes contributing to social cohesion 


Many Public sector agencies contribute to or lead policy and service delivery programmes 
that seek to improve social cohesion in New Zealand’s communities. Some government 
programmes include the following: 


a) The Welcoming Communities programme led by Immigration New Zealand. This supports 
local government, councils and their communities to create welcoming and inclusive 
environments for newcomers. 


b) The New Zealand Migrant Settlement and Integration Strategy also led by Immigration 
New Zealand. It provides an all-of-government approach to settle and integrate recent 
migrants. 


c) The Language Assistance Services Project coordinated by the Ministry of Business, 
Innovation and Employment. This is an all-of-government project to improve access to 
telephone interpreting and translation services for people with limited or no English 
language proficiency. 


d) The /nternational Student Wellbeing Strategy led by the Ministry of Education. It provides 
a framework for Public sector agencies to coordinate efforts for international students, 
including funding for community organisations to support student wellbeing. 


e) A Youth Voice project led by the Ministry of Youth Development. It aims to build two-way 
communication between young people and Public sector agencies. 
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f) The New Zealand Disability Strategy 2016-2026 and Disability Action Plan 2019-2023 led 
by the Ministry of Social Development. These are steps towards meeting New Zealand’s 
commitment to the United Nations’ Convention on the Rights of Persons with Disabilities. 


g) The National Psychological Plan led by the Ministry of Health. The intention is to support 
enhanced community cohesion and social support, involving the development of 
activities that promote social cohesion. 


2.4 Public sector-led community engagement 


Level of community engagement 


Community engagement is important to inform Public sector policy development, service 
design and decision-making. Ultimately, effective community engagement can also build 
social cohesion and inclusion. 


Transparency International New Zealand considers that Public sector agencies’ community 
engagement practices vary and that in some cases resulting policy or programmes did not 
adequately identify, understand or respond to the interests, risks and interdependencies that 
communities had raised. The cumulative impact of these issues is reflected in decreasing 
levels of confidence and trust in the ability of Public sector agencies to: 


a) understand the needs of ethnic and religious communities and treat their members 
competently and fairly; and 


b) develop responsive policies, services and programmes to enable communities to 
participate fully in New Zealand society.” 


In 2018 the Open Government Partnership New Zealand National Action Plan 2018-2020 
suggested that Public sector agencies have more work to do to improve the way they engage 
with communities: 


To date the majority of consultation has been in the “inform and consult” part of the |AP2’s 
spectrum, involving relatively limited degrees of public participation that often occurs in 

the later stage of the policy development process. There are substantial opportunities to 
improve the degree of participation by the public, community organisations, businesses and 
employee groups in the development of policy and the design and delivery of government 
services. Improvements in public participation in recent years have been driven by 
agency-specific or sectoral policy agendas, demand from stakeholders and proactive 

action by key individuals at all levels. Across government, responsibilities related to 

public participation have evolved separately and are somewhat ad hoc. 





?8 Transparency International New Zealand National Integrity System Assessment - 2078 update (May 2019) 
https://www.transparency.org.nz/wp-content/uploads/2019/05/National-Integrity-System-Assessment-2018-update-full-report. pdf. 
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The drive for improved public participation is part of a wider change in public management 
in which the traditional role of the citizen has already moved from “voter” to “customer”, 
and is now moving from “customer” to “co-creator”. Under this view, policy and services 
are designed with, rather than for, people, respecting their knowledge and beliefs, and their 
active role in their own lives and those of other New Zealanders.” 


A May 2020 discussion paper reinforced the point that there is a significant opportunity to 
be gained from collaborating with communities, noting that “agencies must seek to 
co-produce policies, not simply to consult in an often-tokenistic way with communities and 
stakeholders”.3° 


We heard of variable community engagement practices by Public sector agencies, which are 
discussed further in Part 3: What communities told us. 


Community engagement strategies 


Some Public sector agencies have put in place community engagement strategies to 
encourage more inclusive consultation. For example, the Ministry of Health has issued 

A Guide to Community Engagement with People with Disabilities*' and Te Arawhiti has issued 
a Crown engagement with Maori framework, Guidelines for engagement with Maori, 

Crown engagement with Maori - Engagement Strategy Template and Crown engagement 
with Maori - Participant feedback form. Other Public sector agency community 
engagement strategies set out the general purpose and objectives of such engagement. 


New Zealand Police have a unique role of engaging with New Zealand communities in ways 
that contribute to both social cohesion and the counter-terrorism effort. In examining their 
approach to community engagement, we focused particularly on New Zealand Police liaison 
officers’ roles and responsibilities, noting that this was one component of New Zealand 
Police’s community policing approach. 





72 Open Government Partnership New Zealand National Action Plan 2018-2020 (2018). 


3° Paul Spoonley, Peter Gluckman, Anne Bardsley, Tracey McIntosh, Rangimarie Hunia, Sarb Johal and Richie Poulton, 
footnote 2 above. 


31 Ministry of Health A Guide to Community Engagement with People with Disabilities (2017) https://www.health.govt.nz/ 


publication/guide-community-engagement-people-disabilities. 
3? Te Arawhiti - The Office for Maori Crown Relations Crown engagement with Maori (undated) http://tearawhiti.govt.nz/tools-and- 
resources/crown-engagement-with-maori/; Te Arawhiti - The Office for Maori Crown Relations Guidelines for engagement with 
Maori (2018) https://tearawhiti.govt.nz/assets/Maori-Crown-Relations-Roopu/6b46d994f8/Engagement-Guidelines-1-Oct-18.pdf; 
Te Arawhiti - The Office for Maori Crown Relations Crown engagement with Maori - Engagement Strategy Template (undated) 
https://www.tearawhiti.govt.nz/assets/Tools-and-Resources/Crown-engagement-with-Maori-Engagement-strategy-template. 
pdf; Te Arawhiti - The Office for Maori Crown Relations Crown engagement with Maori - Participant feedback form (undated) 
https://www.tearawhiti.govt.nz/assets/Tools-and-Resources/Crown-engagement-with-Maori-Participant-feedback-form- 
template.pdf. 
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New Zealand Police liaison officers’ role in community engagement 


In 2005 New Zealand Police published their strategy Working Together with Ethnic 
Communities - the Future. This was updated in 2019 and focuses on three objectives: 


a) Leading ethnic responsiveness - improving service delivery for ethnic communities. 


b) Building capability - having the right people with the right skills to work with ethnic 
communities. 


c) Working with ethnic communities - developing partnerships with ethnic communities 
to prevent crime and victimisation against them.® 


To help achieve these goals, iwi liaison officers, Pacific liaison officers and ethnic liaison 
officers work with relevant communities to build and maintain effective working relationships. 


The number of liaison officers within New Zealand Police is relatively small. Decisions about 
how New Zealand Police liaison officers are allocated are made by each District. By way of 
example as at 15 March 2019, of the approximately 10,000 New Zealand Police sworn officers 
there were 14 ethnic liaison officers including two at Police National Headquarters in advisory 
roles. We heard that in most Districts there was only one ethnic liaison officer for the entire 
District. This was the case in main centres such as Christchurch and Wellington despite the 
growth of the ethnic population in those cities. 


Some liaison officers struggle to effectively reach all communities in their Districts. And we 
heard that it is not feasible for liaison officers to manage all community relationships. One 
liaison officer noted: 


We are sucha small part of the business, yet carry so much of it ... Every member of Police 
should be a [liaison officer] and changing the mindset of our people is paramount to this. 


Frontline police officers generally respond to incidents, for example engaging with a member 
of the public or community whose house has been burgled and who wishes to make a 

report to New Zealand Police. In contrast, liaison officers do not generally have an incident 
response role. One liaison officer we heard from said that “my role is long term solution 
based rather than responding to incidents”. Another liaison officer told us: 


We proactively engage with ethnic communities to build the rapport and maintain the 
relationships with the ethnic communities. This sort of relationship can only be formed over 
a long period of engagement. 





33 New Zealand Police Working Together with Ethnic Communities - the future: Police Ethnic Strategy (2019) 
https://www.police.govt.nz/about-us/publication/working-together-ethnic-communities-future. 
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By building relationships with communities, liaison officers can help to identify concerns 
communities have and address any community safety issues collectively with communities. 
These concerns are not always crime related and can include anything that negatively 
impacts people’s perceptions of safety (such as disputes with neighbours) or creates conflict 
within or between communities. The role of a liaison officer goes beyond what would be 
considered standard policing. This can include: 


a) explaining the role of New Zealand Police to new refugees; 
b) identifying issues affecting communities and creating initiatives to address these issues; 


c) liaising with other Public sector agencies (for example the Ministry of Social Development 
or Kainga Ora - Homes and Communities) when people need support from these 
agencies; 


d) providing support at community events to provide both the reassurance of a 
New Zealand Police presence and also an opportunity for community members to 
approach liaison officers with questions or concerns; and 


e) playing a mediator-like role to resolve lower level issues within communities, for example 
helping to resolve tensions between neighbours. 


This means New Zealand Police liaison officers have a role in enabling social cohesion. 

The work done by liaison officers was noted favourably by those within New Zealand Police 
and in some communities who had engaged with them. However, we heard from some 
liaison officers about a number of challenges that impact on the effectiveness of their work: 


a) Their role is often not well integrated with the work of other parts of New Zealand Police 
and they can feel like they are working in isolation. 


b) There was a perception that the liaison officer role is sometimes not respected or 
considered to be a serious role within New Zealand Police. Liaison officers felt that this 
was due to the lack of awareness of the role, what it involves and the value it can add. 
As one liaison officer said, “in general [other New Zealand Police officers] have a pretty 
low opinion that we just go to dinners and lunches, that we’re not real cops [and] that 
it’s easy work”. 


c) There isa lack of clarity about their role within New Zealand Police. As one liaison 
officer noted, “some staff are unsure as to what our roles are other than assisting with 
translations”. 


d) There is a need for more organisational leadership to ensure that the role of the liaison 
officers is understood throughout the Districts. 
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As discussed in Part 8: Assessing the counter-terrorism effort, New Zealand Police’s 
counter-terrorism efforts are reliant on good community-Police relationships and liaison 
officers play a key role in this. 


New Zealand Police also have community advisory boards and Maori, Pasifika and Ethnic 
Forums in which representatives of these communities meet with New Zealand Police 
management at District and national level. 


2.5 Public sector support for community capacity development 


We were told about the lack of capacity and capability in some ethnic and religious 
communities to participate in central and local government decision-making processes. 


Community capacity development means promoting the ability of communities to develop, 
implement and sustain their own solutions to problems that affect them. The objective of 
community capacity development is empowering communities rather than achieving specific 
policy goals. It can contribute to improved social, economic and cultural outcomes at 
individual, whanau or community levels. 


Central and local government support community capacity development. For example there 
is central government funding available for community capacity development, including 

the Ethnic Communities Development Fund (discussed earlier in this chapter), Community 
Capability and Resilience Fund, Community Leadership Fund, Safer Community Councils and 
Stronger Communities Action. During our engagement with communities, we heard concerns 
about eligibility for, and decision-making about, government funds such as these. 


Two community initiatives, Peaceful Action Leadership Movement and Project Salam, are 
funded as part of the Ministry of Social Development’s E Ta Whanau project. These two 
community initiatives bring together young people from a range of communities to develop 
leadership skills. 


2.6 Community-led initiatives supporting social cohesion 


Communities and community leaders play a pivotal role in building and maintaining social 
cohesion. This is especially true of community leaders, as they build a sense of identity and 
validate people’s collective understanding of shared social norms and experiences.* 





34 § Alexander Haslam, Stephen D Reicher and Michael J Platow The New Psychology of Leadership: Identity, Influence 
and Power (Psychology Press, Sussex and New York, 2011). 
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A number of community-led organisations are leading discussions about social cohesion 
and what it means to be an inclusive society. Inclusive Aotearoa Collective (a collaboration 
of people across New Zealand committed to building a socially inclusive New Zealand),** 
Migrant Action Trust (supporting migrants and refugees as valuable stakeholders in 

New Zealand society)** and Southland Multicultural Council Incorporated (promoting social 
cohesion through alternative means and community resilience and recovery) are examples 
of these community-led initiatives.*” 


2.7. Oversight and performance monitoring 


In December 2018, the Treasury introduced its Living Standards Framework to help analyse 
and measure how resilient New Zealand’s intergenerational wellbeing is in the face of change, 
shocks and unexpected events. The framework is intended to “strengthen the 

level of rigour and transparency in advice on the expected monetary and non-monetary 

costs and benefits of government policy proposals”.** It is supported by the Living Standards 
Framework Dashboard measurement tool. The Dashboard measures a number of areas of 
wellbeing, including cultural identity and social connections. 


A commitment by Public sector agencies to promoting these areas of wellbeing could benefit 
ethnic and religious communities. However, it is too soon to know the extent to which the 
Living Standards Framework is influencing the ways in which Public sector agencies design 
and implement their policies or interact with ethnic and religious communities. 


Aside from the Living Standards Framework, we are not aware of other system-level 
monitoring of outcomes in relation to social cohesion that were in place before 
15 March 2019. 


2.8 Post-15 March 2019 developments 


Increasing the Office of Ethnic Communities resourcing 


Less than one month after the terrorist attack, on 12 April 2019 the Government announced 
a range of urgent measures to support ethnic communities by adding a one-off increase of 
$1 million into the Ethnic Communities Development Fund to “give affected communities the 
power to develop and lead their own projects alongside other Government initiatives”.*° 





35 Inclusive Aotearoa Collective website https://www.inclusiveaotearoa.nz/. 
3° Migrant Action Trust Facebook page https://www.facebook.com/migrantactiontrust/. 
87 Southland Multicultural Council Incorporated website https://www.southlandmulticultural.co.nz/. 


38 The Treasury Our living standards framework (2020) https://www.treasury.govt.nz/information-and-services/nz-economy/ 
higher-living-standards/our-living-standards-framework. 


39 New Zealand Government media release Responding to the needs of ethnic communities after terror attacks (12 April 2019) 
https://www.beehive.govt.nz/release/responding-needs-ethnic-communities-after-terror-attacks. 
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The Office of Ethnic Communities also received funding ($800,000) for additional staff to 
provide better culturally appropriate support to victims of the terrorist attack and their 
families.4° At the same time the Minister for Ethnic Communities, Hon Jenny Salesa, 
announced a series of meetings across the country involving Imams, Muslim women and 
Muslim youth. The Minister said: 


It is important for me to ensure our Muslim communities are involved and engaged in 
shaping the response to the terror attacks and the recovery process. These conversations 
will be complemented by a series of interfaith dialogues that will bring together 

leaders from different faiths to discuss how we can work collectively to support an 
inclusive society.“ 


The Government announced in the 2019 Wellbeing Budget that an additional $9.4 million 
would be provided over four years to the Office of Ethnic Communities. This funding was 
approved to increase capacity and capability at the Office of Ethnic Communities to respond 
to the impacts of the terrorist attack and to support ethnic communities to develop and lead 
their own initiatives. 


Following this additional funding, the Office of Ethnic Communities increased its community 
engagement staffing to 21 full-time equivalent positions. The staff are located in Auckland, 
Christchurch, Hamilton, Napier, and Wellington and will soon be located in Dunedin, 

New Plymouth and Whangarei. 


In September 2019, the reporting line of the Director of the Office of Ethnic Communities 
(renamed Executive Director in January 2020) was changed from the Deputy Chief Executive, 
Policy, Regulation and Communities at the Department of Internal Affairs to Paul James, Chief 
Executive, Department of Internal Affairs. The role became a second tier position. 


In December 2019, the Minister for Ethnic Communities, Hon Jenny Salesa, announced a 
further increase in funding for the Ethnic Communities Development Fund from $520,000 to 
$4.2 million each year to support community initiatives that help build a stronger, safer, more 
connected and inclusive society. The Minister said: 


With this funding boost the priorities of the fund are expanding to support groups to do 
more work; including and welcoming ethnic diversity; promoting ethnic diversity and 
understanding - including educating New Zealanders about the contribution of ethnic 
communities; developing participation in employment and society; and supporting our 
ethnic communities to thrive through the practice and celebration of culture.” 





4° New Zealand Government media release, footnote 39 above. 
4" New Zealand Government media release, footnote 39 above. 


4 New Zealand Government media release Government delivers funding boost for ethnic communities (6 December 2019) 
https://www.beehive.govt.nz/release/government-delivers-funding-boost-ethnic-communities. 
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In early 2020, four regional interfaith dialogues were hosted by the Minister for Ethnic 
Communities, Hon Jenny Salesa, in Dunedin, Auckland, Christchurch and Wellington. 


In June and July 2020, the Minister for Ethnic Communities, Hon Jenny Salesa, held 
thirteen meetings with approximately 250 Muslim women, youth, Imams and community 
leaders across the country. The purpose was to hear directly from Muslim communities 
about “what was critical to them, and what changes would help create a more diverse 

and accepting society”. The resulting report Conversations with Aotearoa New Zealand’s 
Muslim Communities presented the key themes from the hui and identified opportunities for 
addressing these themes through the government’s work programme.* 


We did not examine the effectiveness of the engagement processes carried out following 
15 March 2019. 


Social inclusion Cabinet papers 


After the 15 March 2019 terrorist attack, calls came from communities for the government to 
support social cohesion and communities around New Zealand. 


In September 2019 the Prime Minister, Rt Hon Jacinda Ardern, and Minister for Social 
Development, Hon Carmel Sepuloni, jointly presented a paper to Cabinet entitled Improving 
social inclusion post the 15 March terror attacks, which provided: 


a) Anoverview of a rapid evidence review about building social inclusion undertaken by 
officials drawing on advice from academics and stakeholders. 


b) A-stocktake of Public sector agency work programmes and strategies covering 
children and youth, counter-terrorism, ethnic communities, education, employment, 
migrant settlement and integration and refugee settlement. Across the 11 agencies 
that provided information, it was identified that there are more than 160 programmes, 
policies and interventions that contribute to improving the social inclusion of 
New Zealand communities. These initiatives vary in size, sector and level of impact 
for New Zealanders, with some of these initiatives being small trials and others large 
scale interventions. 


Cabinet agreed to: 
a) build on existing interventions to: 


i) reduce discrimination in New Zealand communities; 
ii) show government and Public service leadership on social inclusion; 
iii) Support community-based activities that promote an inclusive national identity; and 


iv) strengthen the focus on equity and social inclusion in priority work programmes. 





43 Office of Ethnic Communities Conversations with Aotearoa New Zealand’s Muslim Communities (2019) 
https://www.ethniccommunities.govt.nz/resources-2/conversations-with-aotearoa-new-zealands-muslim-communities/. 
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b) explore a small number of additional interventions with a strong focus on children and 
young people that could have a significant impact, including: 


i) building on existing knowledge of early childhood teachers to support young children 
developing capacities for self-regulation, resilience and social skills (including 
empathy); 


ii) building on the Education/Justice focus area in the Child and Youth Wellbeing 
Strategy that aims to ensure children are free from racism and discrimination; 


iii) expanding evidence-based bullying prevention and responses in schools; and 
iv) increasing understanding of local and national history. 


In June 2020, the Prime Minister, Rt Hon Jacinda Ardern, and the Minister for Social 
Development, Hon Carmel Sepuloni, reported back to the Cabinet Social Wellbeing 
Committee on work to build social inclusion. 


Cabinet noted that an indicative framework had been developed to build a common 
understanding, language, vision and outcomes for social inclusion across government, 
focus and better coordinate action, prioritise collective effort and support more coordinated 
approaches. 


The aim of the framework is to build clear expectations that Public sector agencies would use 
the framework to help guide all work directly related to social inclusion, including policy and 
service development. 


The Cabinet paper also noted that: 


a) officials will test the indicative framework with targeted stakeholder engagement 
to refine the draft social inclusion framework, with support from the Human Rights 
Commission; 


b) work is underway to scope possible measures and indicators of social inclusion, 
working with the Treasury and other agencies; and 


c) there may be opportunities to further join up government, local government, and 
non-government social inclusion work in the second half of 2020. 


Cabinet agreed to include improving social inclusion as a goal for the government’s 
thinking and planning for post COVID-19 Recovery. It noted that progress had been made 
on the design and assessment of the four additional intervention areas identified in the 
September 2019 Cabinet paper but the associated Budget 2020 bids had been put on hold 
as the government works through its post COVID-19 priorities. 


Both the September 2019 and June 2020 Cabinet papers on social inclusion were prepared 
without any engagement with communities, civil society, local government or the private 
sector. Only the Human Rights Commission had some involvement. 
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2.8 Concluding comments 


A public discussion is required 


Social cohesion remains an abstract term that is not well understood. As well it has become 
linked with ideas of assimilation. This is unfortunate. Social cohesion is an inclusive term 
that includes all of New Zealand’s communities, and is about respecting and discussing 
communities’ differences and developing some shared norms and experiences. We see 
social cohesion as enabling everyone to belong, participate and have confidence in public 
institutions. Public sector agencies are reluctant to talk about social cohesion as it has not 
been a government priority and even now government effort is focused on social inclusion, 
which is only one component of social cohesion. 


Robin Peace and Paul Spoonley suggest that the move towards the concept of social inclusion 
is a “more transactional focus that foreshadowed waning political interest in the complexities 
of social cohesion”.** It is easier to focus on a process and concrete activities rather than on 
a concept that is perceived to be challenging to understand like social cohesion. 


Before 15 March 2019, there was no leadership and coordination of New Zealand’s approach 
to building social cohesion or social inclusion at either the ministerial or Public sector 
agency level. Initial action was taken in September 2019 by Cabinet to identify a responsible 
ministerial portfolio and Public sector agency to coordinate government action on social 
inclusion. By June 2020 this coordination of effort was starting to bear fruit with the 
development of an initial social inclusion framework and recognition that it would benefit 
from further targeted feedback from some stakeholders. Explicit agreement that social 
inclusion is to be included as a goal in the government’s thinking and planning for the post 
COVID-19 Recovery is also positive. 


The limited nature of a national dialogue about social cohesion was raised with us by 
communities, domestic and international experts and our Muslim Community Reference 
Group. A consistent view was that there is a need for a broad public discussion on what it 
means, the benefits, how it relates to acknowledging and upholding Te Tiriti o Waitangi and 
how it might be used to underpin policy development and service delivery. 


It is difficult to see how such a discussion will occur if not led by ministers initially. As well, 
the input of communities, civil society, local government and the private sector will be vital 
to the success of the development of policies and programmes of work. 





44 Robin Peace and Paul Spoonley, footnote 25 above at page 111. 
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Data analysis and insights are required 


Work is underway to explore measures and indicators of social inclusion. This work is 
being undertaken alongside other existing measurement frameworks, including the 
Living Standards Framework and others. Further data analysis and reporting are required 
in order to increase transparency, accountability and capability of Public sector agencies 
as the new social inclusion framework is refined, implemented and evaluated. 


Public sector agencies must prioritise collecting relevant ethnic data on all of New Zealand’s 
communities and monitoring the impact of policies and programmes. Transparency 
International New Zealand note: 


The executive’s accountability for the impact of policies is not well institutionalised. 
Project and programme evaluation occurs in some sectors, but the public management 
system does not demand that major policies be independently monitored and evaluated. 
This exposes the government and the public to the risk that policy failures are not 
recognised and corrected.** 


More evaluation of the effectiveness of government policies and programmes is necessary. 
This will result in better informed decisions and ensure that the benefits of government 
policies and programmes can be shared equitably.*° 


Ineffectiveness of the Office of Ethnic Communities 


The effectiveness of the Office of Ethnic Communities has been significantly hampered 

by its limited resources and consequently its performance has been unsatisfactory. 

By 15 March 2019, the resources of the Office of Ethnic Communities were run-down. Its 
influence, visibility and standing with communities and in the Public sector were constrained. 
Limited sector leadership was being exercised. 


Some positive developments have occurred post 15 March 2019. The Office of Ethnic 
Communities’ status within the Department of Internal Affairs has improved, with its 
Executive Director now reporting directly to the chief executive. An increase in resources 
has provided an opportunity for the Office of Ethnic Communities to improve its capacity and 
ability to work across the Public sector and with communities. The additional resourcing will 
not remedy all deficiencies and rebuilding of capacity and capability will take time. 


The strategic fit of the functions of the Office of Ethnic Communities within the Department 
of Internal Affairs as a business unit is awkward. Some community organisations have also 
asked for the Office of Ethnic Communities to be disestablished and for the functions to be 
exercised through a newly established Public service department, nominally referred to as 
the Ministry of Ethnic Communities. Our Muslim Community Reference Group preferred 
this approach. 





45 Transparency International New Zealand, footnote 28 above at page 135. 


46 Ronald Inglehart and Pippa Norris Trump, Brexit, and the Rise of Populism: Economic Have-Nots and Cultural backlash 
(Harvard Kennedy School Research Working Paper Series, 2016). 
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The Office of Ethnic Communities policy function also needs to improve. The Public sector 
has a duty of stewardship to look ahead and provide advice about future challenges and 
opportunities New Zealand faces. It is the responsibility of a chief executive to steward 
their agency’s capability, and capacity to offer free and frank advice, which involves 
providing advice on emerging issues, vulnerabilities and opportunities for policy and service 
performance improvement. 


The Office of Ethnic Communities should develop a data analytics capability - analysing 
data collected by the Public sector to identify the overall state of wellbeing for ethnic 
communities, the areas where the Public sector is performing well for ethnic communities, 
areas where improvements can be made and support for those improvements. Critical 
insights into where and how to direct Public sector efforts to increase ethnic communities’ 
wellbeing is required. 


Community engagement practice needs to improve 


Community engagement is important to inform policy development and design effective 

and equitable policies and services. Public sector agencies engage with communities in 
many ways and there are helpful national and international guidelines to assist Public sector 
agencies to design appropriate community engagement strategies and plans. 


While Public sector agencies involved in the counter-terrorism effort generally engage 

with individuals and communities from time to time, there appeared to be limited 

coherent community engagement strategies and plans in place (see Part 8: Assessing the 
counter-terrorism effort). In relation to Public sector agencies involved in social cohesion 
and social inclusion policies and programmes, we observed interaction at the agency level 
on specific policies and programmes with communities but did not examine the effectiveness 
of those engagements. As indicated earlier, we did however observe that communities were 
substantively involved in neither the design of the social cohesion programme initiated in 
2017 nor the development of the September 2019 and June 2020 Cabinet papers. 


There are substantial opportunities to significantly improve the depth and effectiveness 

of community engagement undertaken by Public sector agencies with communities, civil 
society, local government and the private sector in the development of policy and the design 
and delivery of government services. We make recommendations about social cohesion and 
inclusion in Part 10: Recommendations. 
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Chapter 3: Leadership of embracing 
New Zealand’s increasing diversity 


3.1 Overview 


As we describe in Part 2: Context, New Zealand is much more diverse than many people 
assume. New Zealand is home to people from over 213 different ethnic groups and who 
speak over 150 languages (including the three official languages - English, te reo Maori and 
New Zealand sign language). 


Subject to the continuing effects of the COVID-19 pandemic, immigration to New Zealand is 

projected to remain high for some years due to New Zealand’s ageing population, workforce 
requirements and the desire to create opportunities to develop international linkages in an 

increasingly globalised trade environment. Similarly refugees will continue to arrive on our 

shores due to overseas conflicts. 


In this chapter we consider how relevant Public sector agencies have responded to this, 
focusing on diversity and inclusion within the Public sector and its capability and capacity to 
work with communities. 


We discuss these topics under the following headings. 
a) Political sector leadership and public discussion. 

b) Public sector leadership and coordination. 

c) Diversity within the Public sector. 

d) Cultural competency within the Public sector. 

e) Role of the education system in embracing diversity. 


f) Developments since 15 March 2019. 


3.2 Political leadership and public discussion 


Prior to 15 March 2019, the role of the minister of the state services (renamed minister for 
the public service in 2020) was to oversee the Public service system, ensuring that the work 
of the Public service aligned with overall government priorities, machinery of government 
matters, integrity and conduct, leadership and capability development and support for 
system-wide employment relations. 


The minister for ethnic communities (renamed minister for diversity, inclusion and 

ethnic communities in 2020) was responsible for leading the government’s policies on ethnic 
diversity by supporting ethnic communities to maximise the benefits of ethnic diversity for 
New Zealand. A feature of this ministerial portfolio was engaging directly and regularly with 
ethnic communities across New Zealand. 
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There has been limited public discussion on diversity and the economic and social benefits 
that it brings. What discussion there has been has focused on the gender pay gap, equal 
representation for women and diversity in senior leadership positions within the Public 
sector. Prior to 15 March 2019 there had been limited national dialogue on encouraging and 
adopting common values and inclusive social norms, including how to uphold New Zealand’s 
bicultural foundations while embracing New Zealand’s increasing multicultural communities 
as a strength. This is despite the Speech from the Throne in 2017 indicating 

“[t]his government aspires for this to be a country where all are accepted, no matter who 
they are, where they come from, how they live or what their religious beliefs are”.*’ 


The limited nature of any national dialogue on diversity was raised with us by communities, 
domestic and international experts and our Muslim Community Reference Group. 


3.3. Public sector leadership and coordination 


Te Kawa Mataaho Public Service Commission 


Te Kawa Mataaho Public Service Commission (formerly the State Services Commission) has 
a lead role in ensuring that Public sector agencies are building and maintaining a workforce 
with the capabilities to respond to an increasingly diverse New Zealand. 


Human Rights Commission 


The Human Rights Commission’s role is discussed in Part 2: Context. In relation to diversity 
it works for a free, fair, safe and just New Zealand, where diversity is valued and harmonious 
relations between individuals and among the diverse groups in New Zealand is encouraged. 
The Human Rights Commission states that: 


Harmonious race relations depend on the equal enjoyment of human rights by all, 
regardless of ethnic or national origins or skin colour. Harmonious race relations refer to 
the ways in which peoples who are ethnically diverse positively interact with one another. 
Such positive interaction is based on mutual respect for, and realisation of, each other’s 
rights, non-discrimination, and the recognition of and support for cultural diversity.*° 


Since its 2012 report A fair go for all? Rite tahi tatou katoa? Addressing Structural 
Discrimination in Public Services, the Human Rights Commission has undertaken several 
projects to promote harmonious race relations. In 2016 it developed the first public 
campaign against racism - Give Nothing to Racism: That’s Us. It had also developed 
practical guidance and tools to help people to stand up to and eliminate racism. 





47 New Zealand Government Speech from the Throne (November 2017) https://www.beehive.govt.nz/speech/speech-throne-2017. 


48 Human Rights Commission website Race Relations https://www.hrc.co.nz/our-work/race-relations-and-diversity/. 
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Additional Human Rights Commission projects include monitoring the Convention on the 
Elimination of Racial Discrimination and supporting the Race Unit Speech Awards and Hui 
(a platform for senior high school students to express their ideas on how to improve race 
relations in New Zealand).*9 


Public sector agencies focused on the wellbeing of diverse communities 


There are several Public sector agencies that focus on enabling and supporting the wellbeing 
of diverse New Zealand communities: 


a) The Ministry for Pacific Peoples provides advice and support to the minister for 
pacific peoples. It is the government’s principal advisor on improving outcomes for 
Pasifika people and communities. The Ministry is a government department, led by 
a chief executive. The Ministry has 49.5 full-time equivalent staff spread across its 
offices in Auckland, Wellington and Christchurch. 


b) The Ministry for Women provides advice and support to the minister for women. 
It is the government’s principal advisor on achieving better results for women. It also 
manages New Zealand’s international reporting obligations on the status of women and 
provides women nominees for appointment to state sector boards and committees. 
It is a government department led by a chief executive. The Ministry has approximately 
30 full-time equivalent staff. It is located in Wellington. 


c) The Ministry of Youth Development provides advice and support to the minister 
for youth. It is the government’s principal advisor on supporting and increasing the 
wellbeing of young people aged between 12 and 24 years old. The Ministry is a business 
unit within the Ministry of Social Development and it is led by a fourth tier general 
manager reporting to the group general manager for community partnerships and 
programmes who then reports to a deputy chief executive. The Ministry of Youth 
Development currently has 17.1 full-time equivalent staff. It is located in Wellington. 


d) The Office of Ethnic Communities provides advice and support to the minister for 
diversity, inclusion and ethnic communities. We discuss the Office of Ethnic Communities 
in detail in chapter 2. 


e) The Office of Senior Citizens provides advice and support to the minister for seniors. 
It is the government’s principal advisor on the issues and concerns of older people, such 
as social isolation and elder abuse. The Office of Senior Citizens is a business unit within 
the Ministry of Social Development and is led by fourth tier director of the Office for 
Seniors reporting to the general manager, seniors and international policy who reports 
to a deputy chief executive. The Office of Senior Citizens has six full-time equivalent staff. 
It is located in Wellington. 
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49 Human Rights Commission, footnote 48 above. 
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f) Te Arawhiti - Office for Maori Crown Relations provides advice and support to the 
minister for Maori Crown relations: Te Arawhiti and the minister for Treaty of Waitangi 
negotiations. Its role and responsibilities are to develop the relationship between Maori 
and the Crown and to ensure that the Crown meets its Te Tiriti o Waitangi settlement 
commitments. Te Arawhiti is a departmental agency hosted by the Ministry of Justice 
and is led by a chief executive. Te Arawhiti currently has 242 full-time equivalent staff. 
It is located in Wellington. 


g) Te Puni Kokiri - Ministry of Maori Development provides advice and support to the 
Minister for Maori Development. It is the government’s principal policy advisor on 
issues relating to Maori wellbeing and development. Te Puni KOkiri is a government 
department led by a chief executive. It has 385 full-time equivalent staff, a national 
office and 17 regional and local offices. 


Five of these Public sector agencies are small. They all have broad responsibilities. They 
partner with a wide range of organisations within the Public sector, and with communities, 
the private sector and civil society in order to maximise their impact and influence. They 
tend to focus on a small number of priorities where the biggest difference for that community 
can be made. It requires careful choices about how, where and when they become involved 
in particular issues. 


International examples 


Many countries’ ethnic and religious demographics have changed and continue to do so. 
It is worth noting how some countries provide strategic and policy leadership to support 
their increasingly diverse populations: 


a) Canada - the Department of Canadian Heritage is made up of five sectors - Cultural 
Affairs, Sport, Community and Identity, Official Languages, and Strategic Policy, 
Planning and Corporate Affairs. It reports to the Minister of Canadian Heritage, the 
Minister of Economic Development and Official Languages, and the Minister of Diversity 
and Inclusion and Youth. The Department plays “a vital role in the cultural, civic and 
economic life of Canadians” by developing policies and programmes promoting “an 
environment where Canadians can experience dynamic cultural expressions, celebrate 
[their] history and heritage and build strong communities”.5° Other population-specific 
agencies focus on the needs of particular groups including Crown-Indigenous Relations 
and Northern Affairs Canada, Indigenous Services Canada, National Seniors Council, 
Women and Gender Equality Canada and Youth. 





5° Government of Canada Raison d’tre, mandate and role - Canadian Heritage 
https://www.canada.ca/en/canadian-heritage/corporate/mandate.html. 
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b) Norway - the Ministry of Culture is responsible for policy relating to culture, equality 
and discrimination, copyright, the media, sport and the voluntary sector, and reports to 
the Minister of Culture and Equality. Within this Ministry is the Department for Equality, 
Non-discrimination and International Affairs, which has sectoral and coordination 
responsibility for equality and non-discrimination policy and the implementation of 
international conventions, international cooperation in relevant fields, equality and 
non-discrimination legislation, cultural diversity and general international cultural 
matters." The Ministry of Culture recently released The Norwegian Government’s 
Action Plan against Racism and Discrimination on the Grounds of Ethnicity and 
Religion 2020-2023.” The action plan includes a range of actions for the Ministry of 
Culture, working in conjunction with other relevant ministries, to strengthen efforts 
to fight against racism and discrimination. 


c) Australia - the Department of Home Affairs is responsible for multiculturalism policy 
and monitoring, with the aspiration that: 


Australia is a prosperous, safe and united country. Our inclusive national identity 
is built around our shared values including democracy, freedom, equal opportunity 
and individual responsibility. 


To support this, the Department of Home Affairs works with state governments and 
population-specific agencies such as Veterans’ Affairs, National Indigenous Australians 
Agency, Torres Strait Regional Authority and the Workplace Gender Equality Agency. 

In March 2017 the Department of Home Affairs published Multicultural Australia, United, 
Strong, Successful - Australia’s multicultural statement, which is “the Government’s 
public statement recommitting to multicultural Australia; setting both priorities and 
strategic directions for the coming years”. 
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5" Government of Norway Department for Equality, Non-discrimination and International Affairs 
https://www.regjeringen.no/en/dep/kud/organisation/departments/department-for-equality-non-discrimination-and- 
international-affairs/id2643750/. 


5? Government of Norway The Norwegian Government’s Action Plan against Racism and Discrimination on the Grounds of Ethnicity 
and Religion 2020-2023 (Extracted Version) (2020) 
https://www.regjeringen.no/contentassets/589aa9f4e14540b5a5a6144aaea7b518/action-plan-against-racism-and- 
discrimination_uu.pdf. 





5. 


os 


Australian Government Multicultural Australia, United, Strong, Successful - Australia’s multicultural statement (2017) 
https://www.homeaffairs.gov.au/mca/Statements/english-multicultural-statement.pdf; Australian Government Department of 
Home Affairs website Multicultural affairs https://www.homeaffairs.gov.au/about-us/our-portfolios/multicultural-affairs/about- 
multicultural-affairs/our-statement. 
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3.4 Public sector diversity strategies 


Papa Pounamu Is the Public sector’s diversity and inclusion work programme. 
The programme is designed to help Public sector agency chief executives to achieve 
particular diversity and inclusion goals and obligations and has been in place since 2017. 


Many Public sector agencies have developed organisational diversity and inclusion strategies 
and action plans. In the 2017-2018 year, 69 percent of the 36 Public sector agencies that 
completed the [Public] Service Commission’s stocktake survey had a diversity and inclusion 
strategy or work plan.®> For example the Government Communications Security Bureau 

and the New Zealand Security Intelligence Service launched a joint diversity and inclusion 
strategy in April 2018 called Diversity is our first line of defence.®* This strategy noted that: 


Diversity is central to innovation. It brings forth new and better ways of doing things, 
helps us harness the benefit of technology and improve the efficiency and quality of our 
services. Inclusion is the key to unlocking this potential. 


When we value workplace diversity and inclusion, we see benefits such as higher 
employee engagement, improved performance, greater innovation, retention of talent, 
improved employee wellbeing, lower levels of poor behaviour such as harassment and 
bullying and increased attractiveness to potential employees. 


Most strategies or plans we reviewed demonstrated an increasing awareness that diversity 
and inclusion strengthen both employees and the organisation and mean that the 
communities the Public sector agencies serve are likely to feel more valued, see themselves 
reflected in policies and programmes and know that their views will be heard and respected. 


3.5 Diversity within the Public sector 


Overall the New Zealand public service is diversifying. As at June 2019 the demographics of 
the total public service largely reflected those of the New Zealand population. However, the 
position is different in respect of chief executives and those in senior leadership positions 
(first, second and third tiers). 





54 Te Kawa Mataaho Public Service Commission website Papa Pounamu - Driving diversity and inclusion across the Public Service 
https://www. publicservice.govt.nz/our-work/diversity-and-inclusion/papa-pounamu-driving-diversity-and-inclusion-across-the- 
public-service/. 

55 State Services Commission What’s happening with diversity and inclusion across the State sector (2017/18) https://gwn.govt.nz/ 
assets/Resources/NZ-resources/DI-snapshot.pdf. 


5° Government Communications Security Bureau and New Zealand Security Intelligence Service Diversity is our first line of defence: 
Diversity and Inclusion Strategy 2017-2020 https://www.gcsb.govt.nz/assets/GCSB-Documents/Diversity-and-Inclusion-Strategy. 
pdf. 
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Figure 49: Public service diversity (percentage of staff by ethnicity) as at June 2019 
compared to the New Zealand population” 
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57 Stats NZ Census 2078 https://www.stats.govt.nz/2018-census/; Te Kawa Mataaho Public Service Commission Workforce 
demographic summary (2019) https://www. publicservice.govt.nz/our-work/workforce-data/workforce-demographic-summary/. 
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Table 15: Public service agency diversity (percentage of staff by ethnicity) (2019)*° 


































































































Middle 
One 
Agency Headcount European Maori Pacific Asian or African 
Business Innovation 4229 49.8% 6.5% 7.7% 16.4% 1.5% 
and Employment 
Conservation 2384 70.5% 13.2% 1.2% 3.2% 1.9% 
Corrections 9633 71.0% 21.3% 11.8% 8.6% 2.1% 
Crown Law 184 70.1% 8.2% 2.2% 7.6% 0.5% 
Culture and Heritage 145 84.1% 12.4% 3.4% 6.2% 0.7% 
Customs 1312 70.7% 9.9% 10.2% 15.4% 0.9% 
Defence 147 64.6% 5.6% 2.8% 10.4% 3.5% 
Education 3601 73.5% 12.8% 3.7% 8.3% 1.2% 
Education Review Office 193 66.0% 21.5% 5.8% 4.7% 0.0% 
Environment 386 72.3% 5.9% 1.4% 4.5% 0.8% 
Foreign Affairs and Trade 1060 75.7% 11.5% 5.1% 8.1% 1.0% 
Health 1205 83.2% 7.6% 4.6% 13.5% 0.7% 
Housing and Urban Development 250 61.1% 22.2% 5.6% 11.1% 0.0% 
Inland Revenue 5009 64.3% 12.3% 8.2% 16.0% 2.6% 
Internal Affairs 2304 73.8% 10.8% 10.4% 11.2% 1.4% 
Justice 3584 68.5% 12.9% 9.7% 12.9% 0.2% 
Land Information NZ 702 69.4% 9.2% 3.2% 6.2% 1.2% 
Te Puni Kokiri 319 26.6% 74.3% 7.2% 3.4% 0.0% 
Oranga Tamariki 4172 63.6% 26.5% 15.1% 8.5% 1.8% 
Pacific Peoples 50 10.0% 10.0% 88.0% 4.0% 0.0% 
Pike River 26 84.6% 3.8% 0.0% 0.0% 11.5% 
Primary Industries 3137 70.2% 5.7% 3.1% 10.7% 1.7% 
Prime Minister and Cabinet 264 90.0% 7.7% 2.7% 3.6% 0.0% 
Serious Fraud Office 50 78.0% 2.0% 4.0% 10.0% 2.0% 
Social Development 7041 61.1% 23.5% 16.3% 14.0% 1.3% 
Social Investment Agency 34 85.2% 14.8% 3.7% 7.4% 0.0% 
State Services Commission 142 88.8% 10.4% 3.7% 5.2% 0.0% 
Stats NZ 1036 74.9% 4.4% 4.2% 19.6% 1.3% 
Te Arawhiti 142 77.5% 18.3% 1.4% 2.8% 0.0% 
Transport 163 85.9% 3.7% 0.0% 9.2% 0.6% 
Treasury 531 81.5% 6.2% 1.4% 11.6% 1.5% 
Women 26 61.5% 19.2% 3.8% 15.4% 0.0% 
All Public Service 54304 67.3% 15.5% 9.2% 11.1% 1.5% 








58 Te Kawa Mataaho Public Service Commission, footnote 57 above. 
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We also reviewed the diversity of the Government Communications Security Bureau, 

New Zealand Police and the New Zealand Security Intelligence Service as they are not 
included in the information above. They confirmed to us that they recognised the importance 
of diversity in their work and they have strategies to reduce barriers in their recruitment 
practices. 


Figure 50: Diversity of intelligence and security agencies and New Zealand Police 
(percentage of staff by ethnicity) compared to the New Zealand population® 
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Recruiting people from an ethnic background is not enough if the views and experiences 
they can contribute to Public sector work are not genuinely valued. For example, we heard 
from some New Zealand Police staff that recruiting ethnic people into New Zealand Police 
can seem as though it is “just to fill the numbers or to show the people, but it’s not from 
the heart”. 





59 Stats NZ, footnote 57 above; Te Kawa Mataaho Public Service Commission, footnote 57 above; New Zealand Police Annual Report 
2018/19 (2019) https://www.police.govt.nz/sites/default/files/publications/annual-report-2018-2019.pdf; New Zealand Security 
Intelligence Service Annual Report 2018/19 (2019) https://www.nzsis.govt.nz/assets/media/NZSIS-Annual-Report-2019. pdf; 
Government Communications Security Bureau Annual Report 2018/19 (2019) https://www.gcsb.govt.nz/assets/GCSB-Annual- 
Reports/GCSB-Annual-Report-2019.pdf. 
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3.5 Cultural competency within the Public sector 


A diverse and culturally competent workforce would mean that Public sector agencies 
would more likely have the skills and knowledge to engage meaningfully with communities 
and be able to design policies and deliver services to equitably meet the needs of all 

New Zealanders. We were told that Public sector agencies are expected to authorise time 
for individuals and teams to fully engage in cultural competency learning by increasing 
awareness, building knowledge, acquiring skills, learning behaviours and developing 
attitudes that value diversity and inclusion. 


There are initiatives underway in Public sector agencies to improve cultural competency. 

In 2017-2018, 58 percent of relevant Public sector agencies had a programme to build the 
cultural competency of their employees.®° For example, the Office of Ethnic Communities 
offers an Intercultural Capability online training course to support the promotion of the 
benefits of ethnic diversity.” This introductory course is aimed at increasing people’s cultural 
understanding to better interact or communicate with people from different backgrounds. 
The course is made up of four modules and focuses on understanding what culture is and 
how it impacts on communication and behaviour. 


In 2016 and 2017 staff from the Government Communications Security Bureau and the 

New Zealand Security Intelligence Service attended a two-day external training course called 
Introduction to Islam and the Muslim World. The course covered basic terminology, major 
religious holidays and the roles of Sheikhs/Imams and women in Islam. It also outlined the 
denominations of Islam and the differences in beliefs and practices. Since 2018, Government 
Communications Security Bureau staff have also had the option of attending a half-day 
workshop called Islam and the Muslim World. 


New Zealand Police told us they understand that working with ethnic and religious 
communities requires staff to have a high level of cultural competency and that they are 
committed to improving staff cultural competency. Some, but limited, time is devoted to 
building these competencies during new recruit training at the New Zealand Police College. 
There was no further cultural competency training offered for staff. 


3.7. Role of the education system in embracing diversity 


New Zealand’s education system provides a foundation set of skills for young people to 
understand and appreciate ethnic and religious diversity. 





6° State Services Commission, footnote 55 above. 


S" Office of Ethnic Communities Intercultural Capability E-learning 
https://www.ethniccommunities.govt.nz/resources-2/intercultural-capability/. 
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The social sciences curriculum is the primary method for teaching students about different 
cultures, values and diversity. This curriculum covers a wide range of subjects. The learning 
objectives for National Certificate of Educational Achievement (NCEA) Level 3 Social Sciences 
are to understand how: 


a) cultural practices vary but reflect similar purposes; 


b) early Polynesian and British migrations to New Zealand have continuing significance for 
tangata whenua and communities; 


c) groups make and implement rules and laws; 

d) people make decisions about access to and use of resources; 

e) people remember and record the past in different ways; 

f) people view and use places differently; and 

g) the movement of people affects cultural diversity and interaction in New Zealand.” 


We have not assessed the extent to which the social sciences curriculum reinforces the value 
and implications of diversity in New Zealand. 


The education system includes: 


a) religious studies - learning about the role religion has played in politics, culture, art, 
history or literature; and 


b) religious instruction - classes run by voluntary groups having an implicit or explicit 
endorsement of a particular religion and/or encouraging students to engage with and 
make decisions about accepting it on a personal level. 


There are also National Certificate of Educational Achievement (NCEA) Levels 1, 2 and 3 
achievement standards on religious studies. This is quite separate from religious 
instruction. The rationale for these standards Is that: 


... they have been developed for a diverse Aotearoa New Zealand and need to be able to be 
used by all schools and all students - by those with a specific religious affiliation as well as 
by those who have none but wish to acquire knowledge and understanding of religions." 





62 Ministry of Education website New Zealand Curriculum Online: Social Sciences https://nzcurriculum.tki.org.nz/The-New-Zealand- 
Curriculum/Social-sciences/Achievement-objectives#collapsible3. 


°3 Te Kete Ipurangi website Resources for Internally Assessed Achievement Standards: Religious studies https://ncea.tki.org.nz/ 
Resources-for-Internally-Assessed-Achievement-Standards/Social-sciences/Religious-studies. 


4 Te Kete lpurangi website, footnote 63 above. 
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We did not review the quality of religious studies in New Zealand schools or the numbers 
of students who study these subjects. We do note that these studies have the potential 
to increase the cultural competency of New Zealand school students. If this potential is 
realised, students will carry these competencies into adulthood. 


Religious instruction in primary and intermediate schools has at times been contentious. 
Primary and intermediate schools are able to offer one hour of religious instruction per week 
for a maximum of 20 hours per year.® A student enrolled at a school that is government 
owned or funded (a state school) can only take part in religious instruction if the student’s 
parent has approved this in writing to the school principal. Religious instruction exceeding 
one hour per week may be made available if a majority of parents wish for this to happen and 
certain other conditions are met.°° 


3.8 Developments since 15 March 2019 


Since the 15 March 2019 terrorist attack, there have been a number of developments 
reflecting greater priority being given to embracing and supporting New Zealand’s increasing 
diversity. 


Increased focus on diversity and inclusion matters 


In August 2020 the Public Service Act 2020 came into force. The purposes of the Act, 
amongst other things, are: 


3 Purposes of this Act 
The purposes of this Act are— 


(a) to continue the public service and modernise its operation, while recognising and 
enhancing the non-legislative conventions that it operates under: 


(b) to set out the shared purpose, principles, and values of the public service and the 
people working in it: 


(c) to establish organisational forms and ways of working, including across public services, 
to achieve better outcomes for the public.® 


In relation to workforce diversity, the Public Service Act requires Public service chief 
executives to be guided by the principle that Public service employees should reflect the 
make-up of society and to ensure that employment policies and practices foster a workplace 
that is inclusive of all groups. 





5 Education and Training Act 2020, section 57. 
86 Education and Training Act 2020, section 56. 
®7 Public Service Act 2020, section 3. 


68 public Service Act 2020, section 75. 
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36 The Public Service Act sets out mechanisms for the Public Service Commissioner to: 


a) brief the minister for the public service on the state of the public service once every 
three years including, amongst other things, an assessment of whether and the extent 
to which public service agencies are achieving workforce diversity and inclusiveness 
(which the minister must present to the House of Representatives);°? and 


b) draft advice and guidance on government workforce policy and, after consulting the 
affected agencies and other parties that the Commissioner thinks fit, submit it to the 
minister for consideration.” 


37 Papa Pounamu, the chief executive forum for discussing diversity and inclusion matters, 
is now led by Naomi Ferguson, Chief Executive of Inland Revenue and Peter Mersi, Chief 
Executive of the Ministry of Transport. These two chief executives are responsible for leading 
diversity and inclusion work across the Public service. They support chief executives to 
meet the obligations and expectations set out in the Public Service Act. The overall aim of 
the work programme is to consistently grow diversity and inclusion capability. Public sector 
chief executives have agreed to make the five 2020-2021 Papa Pounamu work programme 
priorities mandatory within their Public sector agencies. The five priorities are: 


1. Cultural competence: Reflecting the significance of the Crown-Maori relationship 
and building Public sector cultural competence and confidence, across the broadest 
range of cultures is integral to ensuring inclusion. 


2. Bias: Addressing bias is a critical factor in ensuring everyone in the Public service has 
fair opportunity in recruitment, career progression and development opportunities. 


3. Leadership: How chief executives lead across the Public Service matters. Diversity 
and inclusion capability across the system depends on strong, inclusive leadership. 


4. Build relationships: Inclusion and belonging is dependent upon having a diverse 
range of supportive relationships in Public sector agency workplaces. Chief executives 
intentionally draw upon those relationships to create positive change. 


5. Employee-led networks: Having a space and mandate to connect with others with 
shared lived experiences supports people to bring their whole selves to work. 
Employee-led networks provide richness to workplaces and contribute valuable 
subject matter expertise.” 
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69 Public Service Act, Schedule 3, clause 16 (4)(a)(v). 
7° Public Service Act, section 96. 


™ Te Kawa Mataaho Public Service Commission website, footnote 54 above. 
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Chief executives have also outlined what the successful implementation of these priorities 
will look like: 


Our high-level success indicators will help us determine how we're going: 


1. Discrimination ts eliminated: all aspects of public service practices are free from 
bias and discrimination 


2. The Public Service is fully accessible and everyone can participate: the Public Service 
provides a welcoming environment for everyone 


3. Weunderstand the make-up of our workforce and society: we collect consistent, good 
quality data 


4. We report on diversity and inclusion progress and revise our plans as needed: we 
are transparent about progress and whether our actions are generating the desired 
outcomes.” 


These pledges are additional to existing diversity and inclusion commitments that many 
Public sector agencies have. 


In October 2020, Mana Aki, a cultural competence training course was launched by the 
Ministry of Business, Innovation and Employment.” Mana Aki consists of eight online 
modules and four team discussions. It takes approximately eight weeks to complete. 


Treasury guidance 

In August 2020, the Treasury issued guidance” requiring Public sector agencies to include in 
their annual reports specific evidence or examples of action within their agency in line with 
the five Papa Pounamu priority areas outlined above. 


Human Rights Commission 

In July 2020 the Human Rights Commission launched two anti-racism campaigns, Give No 
Voice to Racism and Racism is No Joke, the latter an attempt to counter the rise in racism 
against some communities following the spread of COVID-19. 





”? Te Kawa Mataaho Public Service Commission website, footnote 54 above. 


73 Te Kawa Mataaho Public Service Commission website Cultural Competence https://www.publicservice.govt.nz/our-work/ 
diversity-and-inclusion/papa-pounamu-driving-diversity-and-inclusion-across-the-public-service/cultural-competence/. 


™ The Treasury Year End Reporting: Departmental Annual Reports and End-of-Year Performance Information on Appropriations 
(2020). 
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3.9 Concluding comments 


Public discussion on diversity - what it is, its benefits and what it means for multiculturalism 
and Te Tiriti o Waitangi - is largely absent. 


The Public sector workforce is diversifying, and this must continue to be a priority for 

all Public sector agencies (especially for those Public sector agencies involved in the 
counter-terrorism effort, where workforce diversity figures are low and need to be addressed 
more actively). An aspect of this will be supporting workforce diversity at the first, second 
and third tiers. 


Papa Pounamu is a worthwhile venture that must continue to promote and require diversity 
of the Public sector’s workforce. 


The Public Service Act includes some new mechanisms that will assist with transparency 

of Public sector actions in relation to their diversity and inclusion workforce strategy and 
plans. Given the issues in recruiting and retaining a diverse workforce in the Public sector 
agencies involved in the counter-terrorism effort, annual reports (rather than three-yearly as 
envisaged by the Act), providing an overview of progress on the Papa Pounamu commitments 
would be beneficial. They should include the identification of areas where those Public sector 
agencies are performing well, areas where improvements can be made and critical insights 
across all agencies about where to direct their efforts. Annual reporting on all Public sector 
agencies’ progress would be valuable too. 


Ensuring that the Public sector workforce is culturally competent must remain a priority. 
All Public sector agencies require a much better understanding of the nature and extent of 
New Zealand’s diverse population so they can develop effective and equitable policies and 
programmes. While work is underway, more could be done to boost these efforts. 


New Zealand’s education system provides an opportunity to empower young people by 
providing them with tools to understand and embrace diversity. School programmes 

that offer these opportunities should remain a priority for New Zealand’s education system 
to ensure future generations are equipped to participate fully and flourish in New Zealand’s 
future. 


Since the 15 March 2019 terrorist attack, there have been a number of further developments 
reflecting greater priority being given to embracing and supporting New Zealand’s 
increasing diversity. How impactful these initiatives might be is yet to be seen. We make 
recommendations about embracing diversity in Part 10: Recommendations. 
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Chapter 4: Hate crime and hate speech 


4.1 Overview 


In this chapter we look at New Zealand’s laws addressing hate crime and hate speech and 
how New Zealand Police deal with reports of hate-motivated offending. We consider that 
aspects of New Zealand’s legal framework and New Zealand Police practice need to be 
improved. Our guiding principles are the protection of all sections of the New Zealand 
community and the promotion of social cohesion consistently with the values of a free and 
democratic society. 


Developing appropriate legal responses to hate-motivated offending involves reasonably 
difficult legal issues. These include the impact of the New Zealand Bill of Rights Act 1990 
on statutory interpretation, New Zealand’s international obligations, certain practicalities 
associated with how criminal trials are conducted and technical questions of legal drafting. 
These and other issues are discussed in our companion paper Hate speech and hate crime 
related legislation. In this chapter we identify what we consider to be the key issues on 
which we base our recommendations (see Part 10: Recommendations). 


In everyday language, a hate crime means an offence that is motivated by the offender’s 
hostility to the victim as a member of a group that has a common characteristic, such as 
race, religion or sexual orientation. An example is an assault against a person wearing 
religious attire that was motivated by the offender’s hostility towards that particular religion. 
In legal language, hate crime has practically the same meaning except that the law creating 
a hate crime will define the relevant characteristics covered by the offence (these are usually 
called “protected characteristics”). Since the conduct amounting to hate crime (for 
example an assault) is already illegal, it is easy to treat a hate motivation either as a factor 
that can be taken into account for sentencing purposes (which is New Zealand’s current 
approach) or as an element of a separately created hate-motivated offence. 


Hate speech is a less precise term. In this report we will generally use the expression hate 
speech to mean speech that expresses hostility towards, or contempt for, people who share 
a characteristic. Legislation that creates hate speech liability (which can be civil or criminal) 
specifies what types of speech are captured and characteristics that are protected. In this 
chapter we are mainly concerned with the circumstances in which hate speech can, and 
should, be criminalised. 


Unlike a hate crime, conduct criminalised by a hate speech offence - in this case, what has 
been said - is not independently illegal. The difference between legally criminalised hate 
speech and the vigorous exercise of the right to express opinions is not easy to capture in 
legislative language. As well, the more far reaching a law creating hate speech offences, 
the greater the potential for inconsistency with the right to freedom of expression under 
section 14 of the New Zealand Bill of Rights Act. Under section 5 of the New Zealand 

Bill of Rights Act, the right to freedom of expression may be: 





7 See United Kingdom Law Commission Hate Crime: Background to our Review (March 2019) at page 5. 
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... subject to such reasonable limits prescribed by law as can be demonstrably justified 
in a free and democratic society. 


There is considerable scope for argument and controversy as to what are “reasonable limits” 
to the right to freedom of expression. 


Similar considerations apply, although not quite so intensely, to imposing civil liability for 
hate speech. 


A decision to create hate speech offences has to balance a number of overlapping and 
conflicting considerations, including: 


a) the promotion of social cohesion; 


b) the desirability of limiting speech that encourages hostility that may result in harms such 
as discrimination and abuse, fears of physical harm and actual violence; 


c) the importance of freedom of expression; and 
d) ensuring that the law can practically be enforced. 


Language that detracts from social cohesion (such as jokes at the expense of marginalised 
communities), which was once not subject to much, if any, social sanction, is increasingly 
unacceptable in a democratic society. But it is highly debateable whether language that has 
a negative impact on social cohesion should, for this reason alone, be subject to criminal, 
as well as social, sanctions. 


In New Zealand, there are five statutes that impose liability or provide remedies for hate 
speech. They are: 


a) the Human Rights Act 1993; 

b) the Summary Offences Act 1981; 

c) the Harmful Digital Communications Act 2015; 

d) the Broadcasting Act 1984; and 

e) the Films, Videos, and Publications Classification Act 1993. 
We discuss all of them later in this chapter. 


Although hate crime and hate speech are, at least for legal purposes, different concepts, 
they are linked by underlying commonalities and, in terms of their consequences, sit on the 
same spectrum of behaviours (see Part 2: Context). 
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Research shows that there is a link between hate speech and hate crime.” A recent study 
investigated whether there is a link between hate speech online and hate crime offline.” 
Researchers collected Twitter and Police-recorded hate crime data over an eight-month 
period in London and built a series of statistical models to identify whether there is a 
significant association.” The results of the study indicated “a consistent positive association 
between Twitter hate speech targeting race and religion and offline racially and religiously 
aggravated offences in London”.”? What this demonstrates is that “online hate victimisation 
is part of a wider process of harm that can begin on social media and then migrate to the 
physical world”.®° The study notes that if “we are to explain hate crime as a process and not 
a discrete act, with victimisation ranging from hate speech through to violent victimisation, 
social media must form part of that understanding”.” There is value therefore in seeking to 
reduce hate speech online and offline, not only to prevent the direct harm it causes but also 
to limit escalation of hate speech to hate crime. 


It is also plausible to see a link between hate crime and terrorism. Another recent study 
concluded: 


Through the use of multiple data sources, this study uncovers the positive associations 
between hate crime and terrorism. In the context of intergroup conflict, there appears to be 
a continuum between the bias-motivated actions of non-extremists to the hate crimes and 
terrorist acts committed by far-rightists, with the presence of one type of activity seeing an 
escalation in the next type. Asa result, it appears that hate crime and terrorism may be 
more akin to close cousins than distant relatives. ®? 


The rest of this chapter will cover: 

a) hate crime; 

b) sections 61 and 131 of the Human Rights Act; 
c) other laws addressing hate speech; and 


d) reporting and recording of hate-motivated offending. 





7© InternetNZ Online Hate and Offline Harm (8 May 2019); Matthew L Williams and others “Hate in the Machine: Anti-Black and 
Anti-Muslim Social Media Posts as Predictors of Offline Racially and Religiously Aggravated Crime” (2020) 60(1) British Journal of 
Criminology. 


77 Matthew L Williams and others, footnote 76 above. 
Matthew L Williams and others, footnote 76 above at page 94. 


79 Matthew L Williams and others, footnote 76 above at page 111. 


8° Matthew L Williams and others, footnote 76 above at page 114. 


51 Matthew L Williams and others, footnote 76 above at page 112. 


82 Colleen E Mills, Joshua D Freilich and Steven M Chermak “Extreme Hatred: Revisiting the Hate Crime and Terrorism Relationship 
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to Determine Whether They Are ‘Close Cousins’ or ‘Distant Relatives” (2017) 63(10) Crime & Delinquency. 
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4.2 Hate crime 


The current law 


Leaving aside for the moment the offence created by section 131 of the Human Rights 

Act (which we discuss later in this chapter), there are no specific hate crime offences in 

New Zealand. This means that there are no offences in which a hate motivation is an element 
of the offence. 


A hate motivation for an offence is, however, an aggravating factor under the Sentencing 
Act 2002 and can be taken into account by the judge who sentences the offender. Under 
section 9(1)(h), protected characteristics include any: 


... enduring ... characteristic such as race, colour, nationality, religion, gender identity, 
sexual orientation, age, or disability ... . 


The acts of criminal harassment that were reported to us by Muslim communities 
predominantly involved assaults, offensive and threatening behaviour and intimidation. 
Assault can be prosecuted under either the Crimes Act or the Summary Offences Act. 
Offensive and threatening behaviour and intimidation can be prosecuted under the Summary 
Offences Act. A hate motivation for such harassment can be considered during sentencing as 
an aggravating factor (providing that the offender is prosecuted and convicted). 


The Summary Offences Act has limitations. Apart from assaults, it applies only to conduct 
that occurs in a public place. As well, penalties for offences under the Summary Offences 
Act are low (for example, the maximum penalty for a conviction of offensive behaviour or 
language is a fine of $1000). Where the maximum penalty is a fine, taking a hate motivation 
into account during sentencing would not have much practical effect. 


A hate motivation for offences is not recorded in charges and convictions, even if it is taken 

into account during sentencing. This means that recorded convictions do not capture the full 
blameworthiness (culpability) of the offenders. This limits the signalling effect of prosecution 
and conviction and means possible needs for rehabilitative interventions are not highlighted. 


The creation of hate crime offences would provide a signal that hate-motivated offences 
are taken seriously and, for this reason, would be likely to result in increased reporting to 
New Zealand Police of such offences. 
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A model for change 


New Zealand’s approach to hate crime - that a hate motivation can be taken into account 
at sentencing - is not unusual. Some overseas jurisdictions including Canada and some 
Australian states deal with hate-motivated offending in this way.® 


In England and Wales a different approach is taken. There, the significance of a hate 
motivation is also recognised by making that motivation an element of some offences. Where 
a hate motivation is an element of the offence, the maximum penalties are higher than for the 
underlying offence itself. 


For example, under the Crime and Disorder Act 1998 (United Kingdom), the hate motivation 
element of the offences results in much higher penalties than for the underlying offences. 
The higher penalties reflect the culpability of hate-motivated offending. The hate-motivated 
element of offences ensures that the criminal records of offenders (which will record that 
element) reflect the seriousness of their offending. This is likely to have at least some 
deterrent effect and, perhaps more significantly, an effect on societal norms.™ 


This model could be substantially replicated in New Zealand by creating new hate-motivated 
offences in the Summary Offences Act and the Crimes Act, being: 


a) hate-motivated offences for offensive behaviour and language, assault, wilful damage 
and intimidation that correspond with existing offences in the Summary Offences Act; 
and 


b) hate-motivated offences for assault, arson and intentional damage that correspond with 
existing offences in the Crimes Act. 


4-3 Sections 61 and 131 of the Human Rights Act 


The relevant international instruments 


Article 4(a) of the International Convention on the Elimination of All Forms of Racial 
Discrimination requires states to: 


[D]eclare an offence punishable by law all dissemination of ideas based on racial 
superiority or hatred, incitement to racial discrimination as well as all acts of violence 
or incitement to such acts against any race or group of persons of another colour or 
ethnic origins.* 





83 See the Canadian Criminal Code RSC 1985 c C-46, section 718.2; Crimes (Sentencing Procedure) Act 1999 (New South Wales), 
section 21A(2)(h); Sentencing Act 1995 (Northern Territory), section 6A(e); and Sentencing Act 1991 (Victoria), section 5(2)(daaa). 


84 As noted by John Ip “Debating New Zealand’s Hate Crime Legislation: Theory and Practice” (2005) 21 NZULR 575 at page 595 in 
the context of section 9(1)(h) of the Sentencing Act. 


85 United Nations International Convention on the Elimination of All Forms of Racial Discrimination 660 UNTS 195 (opened for 
signature 21 December 1965, entered into force 4 January 1969) . 
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27 The introduction to article 4 provides further explanation as to its purpose: 


States Parties condemn all propaganda and all organizations which are based on ideas 
or theories of superiority of one race or group of persons of one colour or ethnic origin, 

or which attempt to justify or promote racial hatred and discrimination in any form, and 
undertake to adopt immediate and positive measures designed to eradicate all incitement 
to, or acts of, such discrimination and, to this end, with due regard to the principles 
embodied in the Universal Declaration of Human Rights ... . 


28 Article 4 of the International Convention on the Elimination of All Forms of Racial 
Discrimination was implemented in New Zealand by the Race Relations Act 1971, section 25 
of which introduced an offence of inciting racial hatred (corresponding to what is now 
section 131 of the Human Rights Act). And civil liability (broadly along the lines of what is 
now section 61 of the Human Rights Act) was introduced in section 9A of the Human Rights 
Commission Act 1977. Section 9A was repealed in 1989 but was in substance re-enacted as 
section 61 of the Human Rights Act. 


29 += Article 20 of the International Covenant on Civil and Political Rights provides:* 


Article 20 
1. Any propaganda for war shall be prohibited by law. 


2. Any advocacy of national, racial or religious hatred that constitutes incitement to 
discrimination, hostility or violence shall be prohibited by law. 


30 ~=New Zealand has entered a reservation to article 20: 


The Government of New Zealand, having legislated in the areas of the advocacy of national 
and racial hatred and the exciting of hostility or ill will against any group of persons, and 
having regard to the right of freedom of speech, reserves the right not to introduce further 
legislation with regard to article 20. 
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86 United Nations International Covenant on Civil and Political Rights 999 UNTS 171 (opened for signature 16 December 1966, 
entered into force 23 March 1976). 
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The current law 


Section 61(1) creates a civil liability for speech that is “likely to excite” hostility (or other 
consequences): 


61 Racial disharmony 
(1) It shall be unlawful for any person— 


(a) to publish or distribute written matter which is threatening, abusive, or insulting, 
or to broadcast by means of radio or television or other electronic communication 
words which are threatening, abusive, or insulting; or 


(b) to use in any public place as defined in section 2(1) of the Summary Offences Act 
1981, or within the hearing of persons in any such public place, or at any meeting to 
which the public are invited or have access, words which are threatening, abusive, 
or insulting; or 


(c) to use in any place words which are threatening, abusive, or insulting if the person 
using the words knew or ought to have known that the words were reasonably likely 
to be published in a newspaper, magazine, or periodical or broadcast by means of 
radio or television, — 


being matter or words likely to excite hostility against or bring into contempt any group 
of persons in or who may be coming to New Zealand on the ground of the colour, race, or 
ethnic or national origins of that group of persons. 


Section 131(1) creates a criminal offence for speech that is used with “intent to excite” 
hostility (or other consequences). A prosecution for this offence can be brought only with 
the consent of the Attorney-General.” 


131 Inciting racial disharmony 


(1) Every person commits an offence and is liable on conviction to imprisonment for a term 
not exceeding 3 months or to a fine not exceeding $7,000 who, with intent to excite 
hostility or ill-will against, or bring into contempt or ridicule, any group of persons in 
New Zealand on the ground of the colour, race, or ethnic or national origins of that 
group of persons, — 


(a) publishes or distributes written matter which is threatening, abusive, or insulting, or 
broadcasts by means of radio or television words which are threatening, abusive, or 
insulting; or 





87 Human Rights Act 1993, section 132. 
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(b) uses in any public place (as defined in section 2(1) of the Summary Offences Act 
1981), or within the hearing of persons in any such public place, or at any meeting to 
which the public are invited or have access, words which are threatening, abusive, 
or insulting, — 


being matter or words likely to excite hostility or ill-will against, or bring into contempt 
or ridicule, any such group of persons in New Zealand on the ground of 
the colour, race, or ethnic or national origins of that group of persons. 


The primary (although not the only) difference between the sections is that liability under 
section 131 depends on an “intent to excite” hostility whereas liability under section 61 can 
be established where the speech used is “likely to excite” such hostility. 


Section 131 of the Human Rights Act may have some value as a statement of what is and 

is not acceptable behaviour in New Zealand, but it is not practicable to enforce. The position 
is similar under section 61. There has only been one prosecution under section 131 and 

two claims under section 61. These are discussed in detail in our companion paper 

Hate speech and hate crime related legislation. Only one warrants particular mention in 
this chapter - the 2018 decision of the High Court in the Wall case.*® 


The Wall case concerned newspaper cartoons relating to an announcement that government 
would fund the expansion of a free breakfast in schools programme. The central characters 
in the cartoons were Maori or Pasifika people, depicted as negligent parents preoccupied 
with alcohol, cigarettes and gambling at the expense of their children’s welfare. It was 
accepted by both parties in the Wall case that the cartoons were insulting. The issue, 
therefore, was whether the cartoons were likely to bring Maori or Pasifika people into 
contempt (or excite hostility against them). The High Court found that they were not, and 
dismissed the case. 


In the Wall case, the complainant argued that, under section 61 of the Human Rights Act, 

it is unlawful to use language about a protected group that is “insulting” and is intended, 
and likely, to result in the protected group being brought into contempt or ridicule. This is 
a low threshold for civil liability and can be expected to result in considerable push-back on 
freedom of expression grounds. 


In the Wall case, the High Court found that the language in section 61 (“hostility against or 
bring into contempt”) should be applied “only to relatively egregious examples of expression 
which inspire enmity, extreme ill-will or are likely to result in the group being despised”. 





88 wall v Fairfax New Zealand Ltd [2018] NZHC 104, [2018] 2 NZLR 47. 
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The Wall case involved civil liability under section 61 but the same language appears in 
section 131. The requirement for the Attorney-General’s consent to bring a prosecution 
under section 131 of the Act should filter out prosecutions that have no merit. However, 
consent requirements of this kind are not a justification for overly broad offences - that is, 
offences that are defined in a way that captures conduct not worthy of criminal prosecution. 


Where prosecutions are brought, judges seeking to allow for freedom of expression will not 
find much assistance in the language of section 131. This results in the apparently low liability 
threshold being significantly increased by judicial interpretation but in ways that create 
considerable uncertainty. “Relatively egregious” (the standard adopted in the Wall case) 

is not a satisfactory test for the imposition of criminal liability. 


Sharpening the focus of the statutory language 


In the words “intent to excite hostility or ill-will”, the verb “excite” is used in a slightly unusual 
sense and suggests causation. This means that an “intent to excite” cannot be established 
without showing an intention to either cause “hostility or ill-will” that did not previously exist, 
or enhance or increase pre-existing “hostility or ill-will”. It logically follows that preaching 
hatred to the already converted would not breach section 131. This point too is discussed in 
the Wall case. 


Section 131 of the Human Rights Act would be improved if the word “excite” were removed 
and replaced with a term like “stir up”, which is used in corresponding legislation in the 
United Kingdom. The “preaching hatred to the converted” issue could be resolved by adding 
the verbs “maintain” and “normalise”. 


As the Wall case illustrates, the words “excite hostility against or bring into contempt” set 
a liability threshold that is lower than the courts are prepared to accept for the purposes 
of civil liability under section 61 of the Human Rights Act. This is also the case with the 
corresponding language in section 131, “excite hostility or ill-will against, or bring into 
contempt or ridicule”. A modified section 131 would be far more straight-forward to apply 
if “hostility”, “ill-will”, “contempt” and “ridicule” were replaced by a term like “hatred” as 
it implies extreme dislike or disgust, including an emotional aversion. If the offence was 
reframed in this way, it would not be subject to restrictive and imprecise interpretations 
by the courts (such as “relatively egregious”) and could be more easily relied on in 
appropriate cases. 


This reframing would focus the offence on stirring up or provoking hatred of a group of 
persons defined by their protected characteristic. 


Associated with the point just made, we consider that explicit and implicit calls for, or 
normalising of, violence should be expressly addressed in the offence. Such calls for, and 
normalising of, violence are towards the most damaging end of the continuum of harmful 
behaviour (see Part 2, chapter 5). At this end of the continuum, freedom of expression 
arguments are at their weakest and criminal sanctions are most obviously warranted. 
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In a prosecution under section 131, the prosecution is currently required to prove: 
a) a publication that is “threatening, abusive, or insulting”; 


b) an intent to “excite hostility or ill-will against, or bring into contempt or ridicule” people 
sharing a protected characteristic; and 


c) that the publication was “likely to excite hostility or ill-will against, or bring into 
contempt or ridicule” people sharing that protected characteristic. 


In a situation where the first two elements can be made out (a threatening, abusive or 
insulting publication and an intent to “excite hostility”), we see the third element as having 
little or no bearing on whether the conduct is sufficiently culpable to justify in a charge. It is 
thus unnecessary. 


Protected characteristics 


The protected characteristics provided for in sections 61 and 131 of the Human Rights Act do 
not include religious belief. As we discuss in our companion paper Hate speech and hate 
crime related legislation, the general drift of court decisions and academic commentary is 
that Jews and Sikhs can be regarded as ethnic groups (and thus protected by section 131) but 
that this is not the case with followers of Islam or Christianity. Without seeking to challenge 
the reasoning of the particular court decisions, we consider that the resulting distinctions are 
not logical. 


We consider that religious belief should be included in the characteristics protected under 
section 131, given that: 


a) under section 9(1)(h) of the Sentencing Act, “religion” is a protected characteristic; 


b) in other jurisdictions, similar legislative provisions have been amended to include 
religion as a protected characteristic; 


c) it would bring New Zealand into compliance with article 20(2) of the International 
Covenant on Civil and Political Rights, which we have set out earlier in this chapter; 


d) itis not logical that affiliation with Judaism and Sikhism are protected characteristics but 
affiliation with other religions such as Islam or Christianity are not; 


e) the very clear overlap between Islamophobia and racism (in that many victims of 
IsLamophobic harassment are people of colour); and 


f) most significantly, the current realities of Is_amophobia and the association between hate 
speech and terrorism. 





59 See, for example, New South Wales (Crimes Act 1900 (New South Wales), section 93Z); Victoria (Racial and Religious Tolerance 
Act 2001 (Victoria), sections 7-8 and 24-5; Queensland (Anti-Discrimination Act 1991 (Queensland) sections 124A and 131A; 
Northern Ireland (Public Order (Northern Ireland) Act 1987, section 8); and Ireland (Prohibition of Incitement to Racial Hatred Act 
1989, section 1). In England and Wales there is an offence of stirring up racial hatred under section 29B of the Public Order Act 
(United Kingdom) but, the way in which it is defined renders resort to the offence largely impracticable, see above. 
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That said, we acknowledge that there are distinct freedom of expression issues if sharing a 

particular religious belief system is treated as a protected characteristic. There is a strong 
tradition in New Zealand (as in many other countries) that religious belief systems are open 
to debate and that this can be vigorous. Strongly expressed challenges to a religious belief 
system may also amount to criticism of those who adhere to it. It is not easy to determine 

where to draw the line. 


Concerns along these lines are reflected in section 29J of the Public Order Act 1986 
(United Kingdom), which was enacted when “stirring up” religious hatred was introduced 
as an offence in England and Wales. This section provides: 


Nothing in this Part shall be read or given effect in a way which prohibits or restricts 
discussion, criticism or expressions of antipathy, dislike, ridicule, insult or abuse of particular 
religions or the beliefs or practices of their adherents, or of any other belief system or 

the beliefs or practices of its adherents, or proselytising or urging adherents of a different 
religion or belief system to cease practising their religion or belief system. 


This section has made prosecution for the offence for stirring up religious hatred practically 
impossible.°° For this reason we do not support the introduction of an equivalent provision 
to New Zealand law. We consider that concerns about freedom of expression are met with 
a high threshold for liability, requiring the prosecution to establish an intention to stir up, 
maintain or normalise hatred towards members of the protected group and specifically 
criminalising explicit and implicit calls for violence against such a group. 


Types of publication covered 


Section 131 of the Human Rights Act applies only to the publication of “written matter” 

or words that are broadcast “by means of radio or television” or used in or near a public 
place or public meeting. So, unlike section 61 of the Human Rights Act, it does not apply to 
“electronic communications”. This is a significant gap in the scope of the offence that should 
be remedied. Indeed, we see no good reason why there should be restrictions based on how 
hate speech is communicated. 





8° Section 29J, along with the offence of stirring up religious hatred being confined to language that is “threatening” rather than 
“threatening, abusive or insulting” (as is the case with section 131 of the Human Rights Act and its English equivalent in respect 
of racial hatred), has resulted in the offence of stirring up religious hatred becoming practically a dead letter. 
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The location of section 131 and the current maximum penalty 


The low maximum penalty (three months’ imprisonment) for breaching section 131 of 

the Human Rights Act serves to diminish the signalling and standard-setting benefits of 
prosecution and conviction. In contrast, offences in the United Kingdom that are similar to 
section 131 carry a maximum term of imprisonment of seven years.” And in Canada, a person 
convicted of the offence similar to section 131 can receive a prison sentence of two years.” 


We note that if the penalty is as high as (or more than) two years’ imprisonment, this would 
result in those charged with such offences being entitled to choose trial by jury. The current 
case law results in liability depending on subjective conclusions on the part of the court 
based on the “relatively egregious” standard. This involves an impressionistic assessment, 
which is never an ideal basis for imposing criminal law sanctions (because people should be 
able to know in advance with reasonable certainty whether something they intend to do Is, or 
is not, against the law). As well, because this standard is not well suited to being applied by 
juries, an increase in penalty resulting in a right to choose trial by jury makes a reframing of 
the offence all the more desirable. 


Including the offence in the Crimes Act rather than the Human Rights Act would enhance 
the signalling and standard-setting effects of an increased penalty, as the Crimes Act lists 
offences most commonly considered as serious crimes by New Zealanders. 


What a new offence might look like 


A new provision inserted in the Crimes Act 1961, and worded broadly as follows would cover 
the points we have made: 


Inciting racial or religious disharmony 


Every person commits an offence and is liable on conviction to imprisonment for a term 
not exceeding three years who: 


(a) with intent to stir up, maintain or normalise hatred against any group of persons in 
New Zealand on the ground of the colour, race, or ethnic or national origins or religion of 
that group of persons; and 


(b) says or otherwise publishes or communicates any words or material that explicitly or 
implicitly calls for violence against or is otherwise, threatening, abusive, or insulting to 
such group of persons. 





"See sections 18-23 and sections 29B-29G of the Public Order Act 1986 (United Kingdom). 
8? See section 319.1 of the Canadian Criminal Code RSC 1985 c C-46. 
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4.4 Other laws addressing hate speech 


As we have set out above, in addition to the Human Rights Act, there are four other 
New Zealand laws that address hate speech. They cover a wide range of conduct. 


Summary Offences Act 1981 


The Summary Offences Act creates offences involving offensive, threatening and insulting 
language and these apply, although are not limited to, situations where an offender 
threatens, insults or intimidate another person because of their race, colour, ethnicity or 
religion. 


In recent years, flagrant hate-motivated speech has been prosecuted under the Summary 
Offences Act. Examples of such prosecutions are discussed in our companion paper 
Hate speech and hate crime related legislation. 


The Summary Offences Act applies only to conduct in a public place. It cannot, therefore, be 
used against hate speech online, even where a post is clearly directed at another individual 
or group and is visible to other people online. 


Harmful Digital Communications Act 2015 


The Harmful Digital Communications Act makes it an offence to post a digital communication 
with the intention to cause harm to a victim.*? The penalty for the offence is imprisonment 
for up to two years or a maximum fine of $50,000. Harm is defined as serious emotional 
distress.%* For these purposes, the victim is an individual “who is the target of the posted 
digital communication”. 


The offence applies not only to one-to-one communications, but more broadly to online 
digital publishing.°° That said, the requirement for a victim - which in turn requires the 
identification of a target - means the offence does not apply to communications that 
denigrate groups rather than particular individuals. 


The Harmful Digital Communications Act requires “communications principles” to be taken 
into account by those persons and agencies (including the courts) performing functions and 
exercising powers under the Act.% Principle 10 states: 


A digital communication should not denigrate an individual by reason of his or her colour, race, 
ethnic or national origins, religion, gender, sexual orientation, or disability.°° 





°3 Harmful Digital Communications Act 2015, section 22. 
°4 Harmful Digital Communications Act 2015, section 4. 
°5 Harmful Digital Communications Act 2015, section 22(4). 


96 Harmful Digital Communications Act 2015, section 4; R v Partha lyer [2016] NZDC 23957; Law Commission Harmful Digital 
Communications: The adequacy of the current sanctions and remedies (NZLC MB3, 2012) at page 7. 


°7 These communication principles are set out in the Harmful Digital Communications Act 2015, section 6(1). 
98 Harmful Digital Communications Act 2015, section 6(2). 


°9 Harmful Digital Communications Act 2015, section 6(1). 
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Broadcasting Act 1984 


Section 4 of the Broadcasting Act requires broadcasters to maintain programme standards. 
Under the Act, four broadcasting codes of practice have been issued.'°° Each of these codes 
of practice sets out, or incorporates, a standard entitled “Discrimination and Denigration”. 
The standard requires broadcasters to protect sections of the community from verbal and 
other attacks and to foster a community commitment to equality. The standard applies to 
recognised sections of the community, which include sections identified by reference to 
religious belief and race. 


Films, Videos, and Publications Classification Act 1993 


The Films, Videos, and Publications Classification Act censors forms of expression that 

are “objectionable”. It is an offence, punishable by a maximum fine of $2,000, to be in 
possession of an objectionable publication and it is an offence, punishable by imprisonment 
of up to 10 years, to be in possession of a publication that the person knows (or has 
reasonable cause to believe) is objectionable. New Zealand Police have relied on this offence 
to prosecute people who, in other jurisdictions, might have been prosecuted for precursor 
terrorism offences of the kind discussed in Part 8, chapter 13. 


Under section 3 of the Films, Videos, and Publications Classification Act, the primary test for 
whether a publication is objectionable is whether it: 


... deals with matters such as sex, horror, crime, cruelty, or violence in such a manner that 
the availability of the publication is likely to be injurious to the public good. 


Publications that promote terrorism can, in some circumstances, be “objectionable”. 

The individual’s video of his terrorist attack and his manifesto were both deemed to be 
objectionable, and there have been subsequent prosecutions of people in New Zealand 
who have shared the video or excerpts from it.’ That said, the way in which the definition 
deals with publications that promote terrorism is complex. As well, material that promotes 
terrorism was not, before 15 March 2019, a primary focus of those administering the Films, 
Videos, and Publications Classification Act.’ 





'°°The codes of practice are for radio, free-to-air television, paid television and election programmes in an election period. 

'°" Office of Film and Literature Classification Christchurch shooting video officially objectionable (20 March 2019); Decision of 
Film and Literature Board of Review /n the matter of an application under section 47(2)(e) by the Kiwi Party (Incorporated) for a 
review of the publication titled: The Great Replacement (12 August 2019). 

This reflects evidence we received from the Department of Internal Affairs - whose Censorship Team in the Digital Safety Group is 
responsible for enforcing the provisions of the Films, Videos, and Publications Classification Act - that, before 15 March 2019, the 
overwhelming focus of their work was on child sexual exploitation. 
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As we have mentioned, section 131 of the Human Rights Act represents an attempt to comply 
with article 4(a) of the International Convention on the Elimination of All Forms of Racial 
Discrimination. |f the focus of the section 131 offence is sharpened, it will not address all of 
the ideas and themes in article 4(a). For example, a stirring up racial hatred offence does not 
cover all incitement to racial discrimination. 


The reality is that it would not be easy to create offences that both give full effect to the 
article 4 obligation and are consistent with the right to freedom of expression. Expanding 

the definition of “objectionable” to encompass propaganda of the kind envisaged by article 4 
would be an alternative method of complying with article 4. This could be achieved by adding 
“racial superiority, racial hatred and racial discrimination” to “sex, horror, crime, cruelty, 

or violence” in section 3 of the Films, Videos, and Publications Classification Act. Sucha 
change would invite freedom of expression arguments. However, the additional requirement 
under section 3 that the “publication is likely to be injurious to the public good” and other 
safeguards in the definition (discussed in our companion paper Hate speech and hate crime 
related legislation) would provide a reasonable basis for response to such arguments. 


4-5 Reporting and recording of hate-motivated offending 


A recurring theme in our discussions with communities, including Muslim communities, was 
the lack of data about hate-motivated offences and harmful harassment. 


For some types of crime - and we think that this is the case with hate-motivated offending 
involving criminal harassment - the best assessments of the incidence of offending come 
from victimisation surveys. This is because, for such offending, many, perhaps most, 
victims do not make complaints. That means there is much offending that is not captured in 
recorded crime figures. 


In the 2019 New Zealand Crime and Victims Survey, respondents were asked if they thought 
that incidents they had experienced were motivated by discrimination - that is, motivated by 
the offender’s attitude towards the victim’s race, sex, gender identity, sexual orientation, age, 
religion or disability. The survey found that: 


a) a quarter (25 percent) of all incidents and about one third (32 percent) of all 
personal offences were seen by the victim as motivated by discriminatory attitudes; 


b) sexual assault (82 percent), threats and damages (34 percent) and physical offences 
(assault and robbery) (34 percent) were the most common offence types to be 
considered by the victim as having been driven by discrimination; and 


c) almost a quarter (23 percent) of victims of Asian ethnicity felt that the incidents that 
happened to them were driven by discrimination towards their race, ethnicity or 
nationality, compared to 7 percent of victims overall.’ 





1°3 Ministry of Justice The New Zealand Crime and Victims Survey: Key Findings, Cycle 2, October 2019-September 2019 (2020) 
https://www.justice.govt.nz/assets/Documents/Publications/NZCVS-Y2-A5-KeyFindings-v2.0-.pdf. Personal offences include 
theft and property damage, robbery and assault, fraud and deception, cybercrime, sexual assault and harassment and 
threatening behaviour. 
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Accurate recording of complaints of hate-motivated offences would provide some, but only 
limited, assistance in assessing the actual level of offending, as many such offences are 

not reported. It is nonetheless desirable. Unless hate motivations are recorded, they are 
unlikely to be brought to the attention of the sentencing judge to take into account during 
sentencing. Accurate recording enables linkages to be made between different events 
involving the same offender, the same victim or both. And recording, alongside data on how 
complaints are resolved, would provide a starting point for assessing the policing response. 
In turn, this would provide a basis for New Zealand Police to provide assurance to targeted 
communities that their complaints are being taken seriously. 


Most Muslim individuals we spoke to who had been subjected to harmful harassment told 
us that they had not reported the incidents to New Zealand Police. Such incidents are very 
unpleasant but may be brief and may not necessarily reach a threshold where reporting the 
incident is a priority for the victim. In addition, reporting may be inhibited by difficulties 

in identifying the offender. This will be the case where the offender is not known to the 
victim and there is no straight-forward way of identifying them. Importantly, many of those 
we spoke to believed there was little point in reporting harassment to New Zealand Police. 
This was because they had experiences where such reporting had not produced tangible 
outcomes or knew of others who had reported harassment to New Zealand Police without 
result. 


More systematic and complete recording of hate motivations for offending would likely 
enhance community trust in New Zealand Police and, in this way, increase reporting rates. 


There have been calls for better records to be kept of hate-motivated offending complaints 
and official acknowledgements that such records are desirable. We note that recently 

the Foundation Against Islamophobia and Racism has established an online mechanism 
for recording hate-motivated offending in New Zealand based on the United Kingdom’s 

Tell MAMA (Measuring Anti-Muslim Attacks) model.’ 


In recent years, New Zealand Police have made progress in this area. In October 2018, a 
supplementary hate crime flag was introduced into their Communications and Resource 
Deployment dispatch system, which is used to record incidents and manage initial response 
and resource deployment. Incident records are copied to the National Intelligence 
Application. 


Additionally, frontline officers were instructed to record hate crime when recording 
incidents in the National Intelligence Application. And since August 2019, there has been 
a hate crime contributing flag in the National Intelligence Application. But reporting of 
hate motivations remains incomplete and somewhat inconsistent. In part at least, this is a 
result of limited training. 





'°4Foundation against Islamophobia and Racism website http://isLamophobia.co.nz/; TellMAMA Measuring Anti-Muslim Attacks 
website https://tellmamauk.org/. 
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The creation of hate crime offences would facilitate the recording of complaints of 
hate-motivated offending. But the absence of such offences does not make the recording 

of such data impossible. It is possible for New Zealand Police to refine their recording 
systems to capture hate motivations more accurately and in readily searchable form. The 
effectiveness of such systems would be enhanced by training that assists New Zealand Police 
officers in: 


a) identifying bias indicators so that they can identify potential hate crimes when they 
perceive that an offence is hate-motivated; 


b) exploring perceptions of victims and witnesses so that they are in a position to record 
offences that are perceived by the victim (or any witnesses) to be hate-motivated; and 


c) recording such hate motivations in a way that facilitates the later use of section 9(1)(h) of 
the Sentencing Act. 


These are issues that are recognised by New Zealand Police and work on them is continuing. 


4-6 Concluding comments 


We were told that New Zealand has become tolerant of harmful discriminatory expression in 
which ethnic and religious communities, including Muslim communities, are regularly subject 
to hate speech and hate crime online and offline. 


In December 2019, the Human Rights Commission published a report Korero 
Whakamaudhara: Hate Speech that provided an overview of the legal framework on hate 
speech."® The report includes definitions of hate speech and considers different legal 
approaches in New Zealand and around the world. It is intended as a resource to help 
New Zealanders have an informed, inclusive and respectful discussion about the complex 
and contentious issue of hate speech, as well as provide an accessible introduction to the 
subject in national and international law. 


There has been a tendency to see hate crime and hate speech as different phenomena and 
the recording of hate-motivated offending as a separate issue that can be left to be dealt with 
by New Zealand Police practice. As we have explained, we see them as related, sitting ona 
spectrum of harmful behaviours and as warranting systematic review and reform. 





5 Human Rights Commission K6rero Whakamauahara: Hate Speech - An overview of the current legal framework (December 2019) 
https://www.hrc.co.nz/files/2915/7653/6167/Korero_Whakamauahara-_Hate_Speech_FINAL_13.12.2019.pdf. 
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84  Inthis chapter we have explored the legal framework that protects freedom of expression 
and the circumstances in which that freedom may be restricted in order to prevent violence, 
abuse or discrimination. It explores the boundaries between freedom of expression, unlawful 
discrimination and harassment and hate speech. 


85 We have explained why we consider that the current laws in relation to hate crime and hate 
speech neither appropriately capture the culpability of hate-motivated offending, nor provide 
a workable mechanism to deal with hate speech. We have also explained why current 
New Zealand Police practice in relation to recording hate-motivated offending requires 
further improvement. We make recommendations in Part 10: Recommendations that aim to 
effect change to our laws and practice. 
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Chapter 5: Questions asked by the community 


Do staff in Public sector agencies that have been inquired into by the Royal Commission 
receive unconscious bias training? 


Decisions to provide unconscious bias training are made at an individual Public sector 
agency level. We have been advised that a number of Public sector agencies do include 
some unconscious bias training for staff including the Department of Internal Affairs, the 
Department of the Prime Minister and Cabinet, the Government Communications Security 
Bureau, Immigration New Zealand, New Zealand Customs Service, New Zealand Police, the 
New Zealand Security Intelligence Service and Te Kawa Mataaho Public Service Commission. 


Do staff in Public sector agencies that have been inquired into by the Royal Commission 
receive cultural competency training? 


Decisions to provide cultural competency training are made at an individual Public sector 
agency level. We have been advised that a number of Public sector agencies provide some 
cultural competency training for staff including the Department of Internal Affairs, the 
Department of the Prime Minister and Cabinet, the Government Communications Security 
Bureau, Immigration New Zealand, New Zealand Customs Service, New Zealand Police, the 
New Zealand Security Intelligence Service and Te Kawa Mataaho Public Service Commission. 


For example, Immigration New Zealand has developed an Intercultural Awareness Module, 
which has been available to staff since August 2012. Intercultural capability is also promoted 
on the Immigration New Zealand internal website with staff being encouraged to complete 
four online training modules. 


What was the protocol for reporting on meetings between the Department of the 
Prime Minister and Cabinet and non-governmental organisations? 


The Department of the Prime Minister and Cabinet told us that staff are responsible for 
complying with all aspects of the Public Records Act 2005, including the requirement to 
create records as outlined at section 17 of that Act. The extent of notes and minutes will vary 
based on the formality and subject matter discussed at any individual meeting, but it is not 
its standard practice to provide copies of meeting notes to non-governmental organisations 
for comment. 


Community engagement guidelines, consistent with the International Association for 
Public Participation’s quality assurance standard process for community and stakeholder 
engagement’ suggest that, besides a summary of what was said, best practice is to let 
participants know: 


how the information derived from the consultation was used; 
the extent to which their views influenced the final decision; and 


how any unresolved issues will be addressed. 





1°6 international Association for Public Participation Australasia, footnote 7 above. 
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What action was undertaken by the Department of the Prime Minister and Cabinet 
regarding social cohesion before 23 March 2017? 


The Department of the Prime Minister and Cabinet provided support to the Department of 
Internal Affairs’ budget bid in 2016 Programme to Strengthen Social Cohesion, which sought 
funding of $23.6 million over four years. The budget bid was unsuccessful. See Part 9, 
chapter 2 for more information on what happened after the 23 March 2017 meeting. 


What, if any, expertise are staff employed by Public sector agencies to work on social 
cohesion required to have? Does the government require them to train in this area? 


Staff recruitment decisions are made at an individual Public sector agency level. The 
agencies we investigated, including the Department of Internal Affairs, the Department 

of the Prime Minister and Cabinet, the Government Communications Security Bureau, the 
New Zealand Security Intelligence Service and Te Kawa Mataaho Public Service Commission, 
generally told us that there were no particular expertise requirements for social cohesion 
roles - rather, they employed people with a wide range of relevant skills and experience. 


What, if any, processes are in place to manage conflicts of interest when someone froma 
diverse community works for the government in a role that is dedicated to working with 
or supporting that same community? 


Policies and practices for managing conflicts of interest are developed at an individual 
Public sector agency level. Te Kawa Mataaho Public Service Commission has published 
Understanding the code of conduct - Guidance for State servants (2010), which states that: 


Ensuring our actions are not affected by personal interests or relationships is essential if 
we are to be worthy of public trust. It is equally important that we do not act in a way that 
improperly benefits our family or friends or groups in which we have a personal interest. 


We must avoid circumstances where our personal interests or relationships conflict with 
the interests of our organisation. We must also avoid situations where there could be an 
appearance of such conflict. Our actions need to be fair and unbiased and should always 
be able to bear close public scrutiny. An important part of strengthening trustworthiness is 
our commitment to transparency. Openness allows organisations to ensure that conflicts 
are avoided or managed. By being open with our organisation and disclosing non-work 
commitments, we enhance our trustworthiness. 
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What oversight is in place for the Department of Internal Affairs’ social cohesion 
programme? 

The Department of Internal Affairs told us that it is not leading a social cohesion work 
programme at this time. It supports two main workstreams that are related to social 
inclusion: 


Engagement by the Office of Ethnic Communities with the cross-government social 
inclusion programme led by the Ministry of Social Development, which reports to 
Cabinet on progress (see Part 9, chapter 2). 


The Christchurch Call to Counter Violent Extremism Online project, which is sponsored 
by the Deputy Chief Executive (Policy, Regulation and Communities) and a senior officials’ 
group that reports to a ministerial group. 


Why did the Department of Internal Affairs decide to proceed with focusing on Hamilton 
from July 2017 when some Muslim communities had specifically requested a national 
strategy? 

The Department of Internal Affairs told us that it decided to proceed initially with focusing 
on Hamilton to inform and influence government policy, ensure Public sector agencies’ 
services were fit for purpose and culturally appropriate and identify practical solutions that 
were adaptable to various ethnic communities. This would then enable the approach to be 
refined and adjustments made in response to community feedback on appropriateness and 
effectiveness. 


What consideration was given to creating programmes that would be run by 
Muslim individuals for their own community? 


The Department of Internal Affairs told us that it (including the Office of Ethnic Communities) 
applies a community-led development approach. This approach consists of honouring 

Te Tiriti o Waitangi obligations and applying the following key principles for community 
development: 


Shared local visions or goals drive action and change. 
Use existing strengths and assets. 

Many people and groups working together. 

Building diverse and collaborative local leadership. 
Adaptable planning and action informed by outcomes. 


The Office of Ethnic Communities specifically uses the Ethnic Communities Development 
Fund to fund community members and organisations to advance their own programmes and 
initiatives (see Part 9, chapter 2). 


We did not evaluate the effectiveness of the funding decisions or monitoring of the 
implementation and results of the approved projects. 
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What decisions and steps did the Department of Internal Affairs take after the final 
report on the Hamilton Social Cohesion Pilot was submitted in October 2018? 


We have not seen evidence of any further steps taken by the Department of Internal Affairs 
after the final report on the Hamilton Social Cohesion pilot was submitted (see Part 9, 
chapter 2). 


Who in the Department of Internal Affairs attended any countering violent extremism 
conferences or summits in the last five years and which ones were they? 


The Department of Internal Affairs told us that no staff have attended any specific 
conferences or summits on countering violent extremism. However three staff from the 
policy group and digital safety team did attend a digital engagement conference in Australia 
in 2019. 


Where did the money for the Department of Internal Affairs post-15 March 2019 come 
from - specifically funding for an additional 24 staff for the Office of Ethnic Communities 
and an additional $1 million for the Ethnic Communities Development Fund? Was that 
money available in 2018 to be used to support Muslim projects? 


This new money was agreed by Cabinet and sourced from relevant funding provided by an 
Appropriation Act. This money can only be used for the purpose agreed by the Government, 
and none of it was available in 2018. 
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Glossary 


Term 


central agencies 


Definition 


The Department of the Prime Minister and Cabinet, Te Kawa 
Mataaho Public Service Commission (formerly the State 
Services Commission) and the Treasury. 





civil liability 


Legal responsibility for breaching an obligation recognised 
by law. 





civil society 


The space for collective action on shared interests, 
purposes and values. It is the third sector of society, along 
with government and business. It comprises civil society 
organisations and non-governmental organisations. 





community engagement 


The process of working with communities to address issues 
affecting their wellbeing. 





criminal liability 


Legal responsibility for committing an offence prohibited 
by law. 





cultural competency 


The ability to understand, communicate with and effectively 
interact with people across cultures, by a person aware of 
their own worldview and recognising and valuing cultural and 
social norms and differences. Culture can include ethnicity, 
nationality, age, gender identity, sexual orientation, disability, 
religious or faith affiliation. 





diversity 


Differences in individuals’ and groups’ traits and 
characteristics, such as ethnicity, gender identity, sexual 
orientation, age and disability. 





full-time equivalent 


A method of calculating staffing based on hours worked. 
One full-time equivalent corresponds to 40 hours of work 
per week. 





z 


Te reo Maori (Maori language) term that refers to a tribe - 
a large group of Maori people bound together by descent from 
a common ancestor and associated with a distinct territory. 





Public sector agency 


In general, an organisation that works for the government 
of New Zealand. 

In this report, “Public sector agencies” means the 

217 organisations listed in the appendix. 





securitisation 


When a group of people or communities are seen primarily 
as a potential security threat. 
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Term Definition 


social cohesion A socially cohesive society is one in which all individuals 
and groups have a sense of belonging, social inclusion, 
participation, recognition and legitimacy. 





social inclusion The process of improving how individuals and groups 
participate in and contribute to society on their own terms. 





structural discrimination Where an entire network of rules and practices disadvantages 
less empowered groups while serving at the same time to 
advantage the dominant group. 





tangata whenua Te reo Maori (Maori language) term for Maori, which means 
“people of the land”. 
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Chapter 1: Introduction 


1.1 Topics 


Our Terms of Reference directed us to make recommendations on what improvements 
should be made to the way Public sector agencies gather, share and analyse information, 
how Public sector agencies or operational practices could be improved to prevent future 
terrorist attacks and any other matters to provide a complete report. 


This Part sets out our recommendations in four key areas: 
a) Improving New Zealand’s counter-terrorism effort (chapter 2). 
b) Improving New Zealand’s firearms licensing system (chapter 3). 


c) Supporting the ongoing recovery needs of affected whanau, survivors and witnesses of 
the 15 March 2019 terrorist attack (chapter 4). 


d) Improving New Zealand’s response to our increasingly diverse population (chapter 5). 
We deal with implementation of the recommendations in chapter 6. 


Our recommendations are mutually reinforcing - they provide benefits that support one 
another. They have been designed to achieve system and social change, with many of 
the recommendations underpinned by the principle of continuous improvement. The 
recommendations should be read in the context of the whole report. We see them asa 
package and not suitable for piecemeal implementation. 


1.2 Themes 
In the chapters that follow we explore four themes. 


The threat of terrorism is continuing to evolve. We need to understand the threat and be 
ready to mitigate the risks. Strong government leadership and direction are required 

to provide effective oversight and accountability of the counter-terrorism effort. It is 

also necessary to ensure the counter-terrorism effort is well-resourced, that roles and 
responsibilities are well understood across Reduction, Readiness, Response and Recovery 
at the national, regional and local levels and resources are appropriately focused to support 
a safe New Zealand. 


New Zealand’s population is becoming increasingly ethnically and religiously diverse 

(see Part 2, chapter 2). Strong government leadership and direction are required to position 
New Zealand (and in particular the Public sector) to respond and adapt to our increasingly 
diverse population. Leadership is necessary to effect the social shift that over time will help 
to achieve a safe and inclusive New Zealand. 
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Implementation of our recommendations will also require strong government leadership. 


Engaged and accountable government decision-making will improve the quality of 
decisions and enable Public sector policies, programmes and services to be designed 

and delivered for the requirements of New Zealand’s increasingly diverse society. This will 
require a change in the way the Public sector (and in particular the agencies involved in the 
counter-terrorism effort) engages with communities. The Public sector mindset must shift to 
value communities’ input into decisions, transparency and engaging in a robust debate. 


Having a common understanding of roles and responsibilities is critical to achieving change 
and maintaining the benefits of that change. Everyone in society has a role in making 
New Zealand safe and inclusive. But it is apparent that there is no common understanding 
of what those roles are, how they relate to each other and what they should be seeking 

to achieve. Clarity of roles and responsibilities is particularly critical as New Zealand’s 
demographics will continue to change over the next 20 years. The New Zealand government 
should make sure every New Zealander can feel welcome, contribute and belong. To do this, 
the Public sector needs to work with all communities to understand the complex dynamics 
at play and ensure that its policies, practices and services respond to those dynamics and 
embrace the value of diversity. 


Diversity can contribute a range of social and economic benefits. Diversity enriches us 
all. It brings new ideas, extends our skills, attracts businesses and creates new jobs. 
Diversity also brings challenges. Not everyone responds well to diversity (see Part 9, 
chapter 2). We heard experiences of racism, hate, prejudice, fear and discrimination 
and that some communities do not always feel protected or understood by Public sector 
agencies (Part 3: What communities told us). 


The government needs to take the lead on two fronts to ensure that everyone is aware 
of their role in making New Zealand safe and inclusive. First, the government (and 
agencies involved in the counter-terrorism effort) will have to ensure that New Zealand’s 
counter-terrorism effort is valued by the people it seeks to protect. It will take time to 
enhance public trust and confidence in New Zealand’s counter-terrorism effort, so work 
to do so should begin urgently. 
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Second, it must understand what New Zealand’s changing demographics mean for 

New Zealand as a society and promote consistent messages about the benefits of diversity 
and an inclusive society. Social cohesion is important in itself and has wider benefits and 
should be pursued on its own terms (Part 9: Social cohesion and embracing diversity). 

This is why we have made separate recommendations with respect to the counter-terrorism 
effort and social cohesion and embracing diversity. However, the benefits of some of our 
recommendations will be realised with respect to both areas. Over time, government 
leadership on the benefits of diversity should bring about changes in New Zealand and 
reduce the incidence of hate-based crime. 


Underpinning all of this, New Zealand needs fit for purpose laws and policies. Keeping 
pace with New Zealand’s evolving context will not be sufficient. Laws and policies need 

to be practical for the future as New Zealand continues to change. They also need to be 
relevant and effective as the threats New Zealand faces continue to evolve. This extends to 
ensuring the Intelligence and Security 2017 and Terrorism Suppression Act 2002 are both fit 
for purpose, providing for hate crime offences, creating a workable approach to hate speech 
and encouraging the better recording of reports of hate crime. Also important is the need for 
New Zealand Police to improve their administration of the firearms licensing system. 
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Chapter 2: Recommendations to improve 
New Zealand’s counter-terrorism effort 


2.1 Overview 


This chapter makes a number of recommendations to improve New Zealand’s 
counter-terrorism effort and prevent terrorist attacks in the future. They focus on two 
broad priorities for action: 


a) Ensuring that there is better leadership of, and support for, intelligence and security in 
New Zealand. 


b) Increasing awareness and providing opportunities for meaningful engagement of all 
New Zealanders in relation to extremism and preventing, detecting and responding to 
current and emerging threats of violent extremism and terrorism. 


2.2 Strong government leadership and direction are required 


Clarifying leadership and creating a new agency for intelligence and security 


The counter-terrorism effort must be cohesive, collaborative and trusted.’ It also needs to 
be integrated, agile, effective and accountable, with directive leadership and accountability. 


We have concluded that the counter-terrorism effort had been slow to understand the 

threat of extreme right-wing domestic terrorism (Part 8, chapter 15). We have identified a 
number of areas where the counter-terrorism effort needs improving. Responding to the 
question “Could such a terrorist attack be prevented in the future?” we consider that the 
counter-terrorism effort should be better designed to provide assurances that New Zealand 
is as safe as it can be. Improved strategic leadership and greater accountability are required. 


Our Recommendations 1, 2 and 3 should enable: 


a) well-informed ministers (with thorough understanding of the immediate, medium-term 
and longer-term terrorism risks and threats); 


b) capability to develop effective and comprehensive strategic policy advice on extremism 
and terrorism, together with integrated advice based on both intelligence assessments 
and risk management frameworks; 


c) a governance body to set system performance standards and accepted best practice 
in the New Zealand context, against which to monitor performance and measure 
effectiveness and compliance with human rights obligations (Recommendation 3); 


d) effective leadership of the security and intelligence side of the national security system 
with clear accountabilities and responsibilities (Recommendation 2); 





"In accordance with Outcome 3 of the Department of the Prime Minister and Cabinet Strategic Intentions 2020/21 to 2023/24 
(2020) https://dpmc.govt.nz/publications/dpmc-strategic-intentions-2020-2024. 
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e) transparent purpose and direction setting, set out in a counter-terrorism strategy, with 
well-defined accountability for the development, implementation and monitoring of that 
strategy (Recommendation 4); 


f) regular reviews of the authorising environment, including the legislative framework for 
countering terrorism and violent extremism; and 


g) enhanced social licence as a result of the consequences just outlined along with 
high levels of engagement with communities, civil society, local government and the 
private sector. 


The current cross-agency governance and leadership arrangements are not working 
(Part 8, chapter 3). There is no minister responsible and accountable for the 
counter-terrorism effort. We recommend there should be. 


To support the minister we recommend the establishment of a new national intelligence and 
security agency with its roles and functions set out in new legislation. This will deliver a more 
systematic approach to addressing extremism and preventing, detecting and responding to 
current and emerging threats of violent extremism and terrorism, especially if it is tasked 
with developing effective and comprehensive strategic policy advice. The chief executive 

of the new agency will be the national adviser on intelligence and security, with the agency 
having the advantage of focusing solely on the threats and intelligence issues currently 
addressed by the Security and Intelligence Board. This is a shift from what the Department 
of the Prime Minister and Cabinet currently does, operating across the spectrum of national 
security and all-of-government issues (Part 8, chapter 3). Such a change would provide 

for the Department of the Prime Minister and Cabinet to focus on providing second opinion 
advice through its Policy Advisory Group, with the chief executive remaining the chair of the 
Officials’ Committee for Domestic and External Security Coordination. 


The new well-resourced national intelligence and security agency will: 
a) be the sector lead for intelligence and security; 


b) develop a public-facing strategy that addresses extremism and preventing, detecting 
and responding to current and emerging threats of violent extremism and terrorism 
(Recommendation 4) and require other Public sector chief executives to align their 
planning and resources to it; 


c) be the steward of relevant national security legislation (including the Intelligence 
and Security Act 2017 and Terrorism Suppression Act 2002) and be responsible for 
relevant intelligence and security strategic and responsive policy advice. In doing so, 
it will assume functions currently undertaken by the Ministry of Justice and the 
Department of the Prime Minister and Cabinet. 
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d) assume responsibility for the independent intelligence assessment functions currently 
performed by the Combined Threat Assessment Group and the National Assessments 
Bureau. This will be underpinned by high quality horizon scanning and deep assessment 
expertise; 


e) be responsible for the design of the performance management framework and 
monitoring progress against it; 


f) lead engagement with communities, civil society, local government and the private 
sector on strategic intelligence and security issues; and 


g) ensure the counter-terrorism effort conforms to New Zealand’s domestic and 
international human rights obligations. 


Other functions are discussed in Recommendations 8, 9, 14 and 16. 


New legislation will be required to implement these recommendations including clarifying 
roles and responsibilities and reconciling how the new agency will work with the intelligence 
and security and law enforcement agencies. 


Currently the Security and Intelligence Board is essentially a voluntary collaboration 
mechanism for intelligence and security matters, including the counter-terrorism effort 
(Part 8, chapter 3). This is not working effectively. 


We recommend the government investigate using the provisions in the Public Service 
Act 2020 to establish an interdepartmental executive board to replace the Security 
and Intelligence Board. Section 25 of the Public Service Act sets out the purposes of 
interdepartmental executive boards: 


(a) to align and co-ordinate strategic policy, planning, and budgeting activities for 2 or 
more departments with responsibilities in a subject matter area: 
(b) to support those departments to undertake priority work in the subject matter area: 


(c) to support cross-department initiatives in the subject matter area. 


Putting in place an interdepartmental executive board would be best worked through by 
Te Kawa Mataaho Public Service Commission in conjunction with the relevant Public service 
agencies. We do not therefore offer a prescriptive recommendation. 
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We acknowledge that while our focus has been on the counter-terrorism effort our 
Recommendations 1-3 relate to all intelligence and security matters currently addressed 
by the Security and Intelligence Board. It is impractical to carve out counter-terrorism 
responsibilities. We have not identified any detriments if the minister, new agency and 
potential new governance body were to be given responsibility for all intelligence and 
security matters currently within the mandate of the Security and Intelligence Board. 


The new agency will need to work with the National Emergency Management Agency and 
local government. It would be inefficient for the new agency to establish structures at the 
local and regional level that duplicate existing emergency management structures. 


In relation to Recommendations 1-3, we examined several options. We considered simply 
changing the Security and Intelligence Board into an interdepartmental executive board, 
leaving other aspects of the system unchanged. We decided that this option would not 
address our assessment that an agency solely focussed on strategic intelligence and security 
issues is required. We also considered establishing an entirely new “uber” agency that 
would incorporate both strategic and all operational functions currently performed by the 
Department of the Prime Minister and Cabinet, the Government Communications Security 
Bureau, and the New Zealand Security Intelligence Service, and some functions of 

New Zealand Police. But the significant disruption this would cause would outweigh the 
potential benefits. Implementation of our Recommendations 1-3 should achieve the 
necessary outcomes and accountability, without requiring such a complex and lengthy 
machinery of government change. 


Another option we considered was whether the Government Communications Security 
Bureau and the New Zealand Security Intelligence Service should be amalgamated. We 
expect this will be considered as part of the forthcoming review of the Intelligence and 
Security Act. 
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We recommend that the Government: 


1. Ensure a minister is given responsibility and accountability to lead and coordinate 
the counter-terrorism effort. 


2. Establish a new national intelligence and security agency that is well-resourced 
and legislatively mandated to be responsible for strategic intelligence and security 
leadership functions including: 


a) 


b) 


c) 


d) 


e) 
f) 


8) 


h) 


j) 


a chief executive who is designated as the intelligence and security adviser to the 
prime minister and to Cabinet and chairing the Security and Intelligence Board or 
the potential new governance body (Recommendation 3); 


operating as the sector lead and coordinator for strategic intelligence and 
security issues; 


developing a counter-terrorism strategy that includes countering violent 
extremism (Recommendation 4); 


providing strategic policy advice to the responsible minister(s) on intelligence 
and security issues; 


intelligence assessment and horizon scanning supported by deep expertise; 


leading the engagement with communities, civil society, local government and the 
private sector on strategic intelligence and security issues; 


ensuring the counter-terrorism effort conforms to New Zealand’s domestic and 
international human rights obligations; 


leveraging the emergency management structures at the local and regional levels; 
system performance monitoring and reporting; and 


accountability to the minister for the performance of the counter-terrorism effort 
(Recommendation 1). 


3. Investigate alternative mechanisms to the voluntary nature of the Security and 
Intelligence Board including the establishment of an Interdepartmental Executive Board 
as provided for by the Public Service Act 2020 to, amongst other things: 


a) 


b) 


align and coordinate the work, planning and budgets across relevant Public sector 
agencies addressing all intelligence and security issues; 


report to the Cabinet External Relations and Security Committee, including on 
current and emerging risks and threats, on a quarterly basis. 
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c) inrelation to the counter-terrorism effort: 


i) recommend to Cabinet the strategy for addressing extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism 
and terrorism developed by the national intelligence and security agency 
(Recommendation 4); and 


ii) ensure the activities to implement the strategy for addressing extremism and 
preventing, detecting and responding to current and emerging threats of 
violent extremism and terrorism are identified, coordinated and monitored. 





An integrated preventing and countering extremism, violent extremism and 
terrorism strategy 


16 


In early 2020, the Department of the Prime Minister and Cabinet released a Countering 
terrorism and violent extremism national strategy overview (Part 8, chapter 3).? It is 
not the strategy we envisage. Although it discusses the importance of connecting with 
communities to reduce and mitigate the risks of terrorism and violent extremism, it 
was produced without any substantive involvement by communities, civil society, local 
government and the private sector. 


There needs to be a more effective system-wide, public-facing strategy to address 
extremism and prevent, detect and respond to current and emerging threats of extremism, 
violent extremism and terrorism. The strategy should be developed in collaboration with 
communities, civil society, local government, the private sector and the Advisory Group on 
Counter-terrorism (Recommendation 7). 


We can do much to reduce New Zealand’s risk through both a risk management approach 
that builds on the Maori-Crown relationship and social cohesion activities. 


This strategy will need to: 


a) set out and explain objectives and priorities and the contributions that communities, 
civil society, local government and private sector can make to national security; 


b) be supported by an action plan that aligns the efforts of all those involved; and 


c) be reviewed within three years of its publication in collaboration with communities, 
civil society, local government, the private sector and the Advisory Group on 
Counter-terrorism (Recommendation 7). 





? Department of the Prime Minister and Cabinet Countering terrorism and violent extremism national strategy overview (undated) 
https://dpmc.govt.nz/sites/default/files/2020-02/2019-20%20CT%20Strategy-all-final. pdf. 
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20 Each Public sector agency will require its own action plan. Each action plan will focus on how 
that agency will contribute to the outcomes of the national strategy. Performance measures 
will be included. The new national intelligence and security agency (Recommendation 2) will 
lead the coordination of these individual action plans to ensure they are cohesive and that 
there are no gaps in Public sector agency efforts. The new agency will monitor Public sector 
agency performance and report on it to the responsible minister. 


21 Through our inquiry we have recognised the importance of the role of communities, civil 
society, local government and the private sector in the counter-terrorism effort (Part 8, 
chapter 15). It is critical that New Zealand’s communities, civil society, local government, the 
private sector and the Advisory Group on Counter-terrorism are engaged in a collaborative 
manner in developing the overarching strategy for New Zealand. There should be clarity as 
to their ongoing contributions to improve public understanding and knowledge and foster 
cooperation and trust. 


We recommend that the Government: 


4. Develop and implement a public-facing strategy that addresses extremism and 
preventing, detecting and responding to current and emerging threats of violent 
extremism and terrorism that: 


a) is led by the new national intelligence and security agency (Recommendation 2); 


b) is developed in collaboration with communities, civil society, local government 
and the private sector; 


c) sets the purpose and the direction of the strategy, with goals, milestones and 
performance measures; 


d) sets priorities for the counter-terrorism effort across Reduction, Readiness, 
Response and Recovery; 


e) defines roles and responsibilities for Public sector agencies, communities, civil 
society, local government and the private sector to implement the strategy 
across Reduction, Readiness, Response and Recovery; 


f) has oversight from the responsible minister (Recommendation 1); and 


g) is reviewed within three years of publication in collaboration with Public sector 
agencies, communities, civil society, local government, the private sector and 
the Advisory Group on Counter-terrorism (Recommendation 7). 
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2.3 Engaged and accountable government decision-making 


Strengthened Parliamentary oversight of agencies 


22 Improved oversight of the counter-terrorism effort will lead to better performance outcomes. 
Those who provide that oversight by monitoring and scrutinising the Public sector agencies 
involved in the counter-terrorism effort need access to relevant information. 


23. We recommend the Auditor-General’s functions be expanded to undertake performance 
audits across the intelligence and security agencies (Recommendation 5). 


24 More debate on, and cross-party support for, national security issues, including the 
counter-terrorism effort, will help give these issues the attention they require. 
Strengthening the role of the Parliamentary Intelligence and Security Committee will 
provide a forum for that debate. Importantly, the Intelligence and Security Committee is 
currently unable to inquire into the activity of an intelligence and security agency or into 
any matter that is operationally sensitive. That means that its role is far more limited than 
that of its counterpart parliamentary committee in the United Kingdom. The equivalent 
United Kingdom parliamentary committee has access to highly classified information and 
has produced a number of reports that address the operational activities of intelligence 
and security agencies in the United Kingdom. 


25 The Parliamentary Intelligence and Security Committee should receive public submissions on 
the annual statement on extremism and preventing, detecting and responding to current and 
emerging threats of violent extremism and terrorism (Recommendation 17), adding to the 
public debate of counter-terrorism issues alongside Recommendations 4, 15 and 16. 





We recommend that the Government: 


5. Amend the Public Finance Act 1989 to require the intelligence and security agencies 
to provide performance information that can be the subject of performance audit by 
the Auditor-General. 


6. Strengthen the role of the Parliamentary Intelligence and Security Committee so 
that it can provide better and informed cross-parliamentary oversight of the national 
security system (including the counter-terrorism effort) and priority setting, and 
members can access sensitive information as necessary for such oversight. 
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26 


27 


28 


A new role for communities, civil society, local government and the private sector 


All New Zealand sectors and communities are affected by the threat of terrorism. We have 
concluded communities, civil society, local government and the private sector should be 
involved in an advisory forum with its functions set out in legislation. The legislation would 
provide that the advice from an Advisory Group on Counter-terrorism must be taken into 
account by the chief executive and the Security and Intelligence Board or its replacement 
(Recommendation 3). The focus of the Advisory Group on Counter-terrorism would be to: 


a) test ideas and provide advice to the new national intelligence and security agency and 
Public sector agencies involved in the wider counter-terrorism effort on approaches to 
stop people engaging in extremism, violent extremism and terrorism; 


b) provide advice on the threatscape and National Intelligence and Security Priorities; and 


c) provide advice on engaging with communities, civil society, local government and the 
private sector. 


We recommend the chief executive of the national security and intelligence agency 

ensure an Advisory Group on Counter-terrorism includes representative membership from 
communities, civil society, local government and the private sector. The make-up of the 
Advisory Group on Counter-terrorism should include a gender balance, ethnic and religious 
diversity, a range of ages (youth, adults and elders) and geographical spread. What 
constitutes “representative” will evolve as society, and the nature of threats, changes over 
time. The chief executive should consider whether there is a necessity for members of the 
Advisory Group on Counter-terrorism to be security cleared to an appropriate level. The 
Advisory Group on Counter-terrorism should regularly connect with other advisory groups 
that are set up by Public sector agencies involved in the counter-terrorism effort. 


We considered recommending that the Advisory Group on Counter-terrorism provide 

an annual report to Parliament. However, we decided this would place an unnecessary 
administrative burden on the group. Instead we recommend that the annual statement to 
Parliament on extremism and preventing, detecting and responding to current and emerging 
threats of extremism, violent extremism and terrorism priorities (Recommendation 17) 
should include a summary of the advice that has been provided by the Advisory Group on 
Counter-terrorism to the new national intelligence and security agency and other relevant 
Public sector agencies and the actions that have been taken in response to that advice. 
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We recommend that the Government: 


7. Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to establish an Advisory Group on Counter-terrorism: 


a) responsible for providing advice to the national intelligence and security agency 
and the Security and Intelligence Board or its replacement (Recommendations 2 
and 3); and 


b) with functions to be established in legislation as soon as practicable, but without 
delaying its establishment. 


8. Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to include in advice on the National Security and Intelligence 
Priorities and in the annual threatscape report (Recommendation 17), a summary 
of the advice provided in the preceding year by Advisory Group on Counter-terrorism 
(Recommendation 7) and the actions that have been taken in response to that advice. 





Public sector agencies can and should share information more widely 


29 Information sharing between Public sector agencies is critical to the effectiveness of the 
counter-terrorism effort (Part 8, chapter 9). A shift in Public sector agencies’ approach to 
highly classified information, in particular ensuring that information is classified correctly 
and seeing the “need to know” principle as enabling rather than restricting, will allow more 
information to be shared easily between Public sector agencies. We are not the first to 
form this view. In a 2018 Review of the New Zealand Security Classification System, the 
Inspector-General of Intelligence and Security made a number of recommendations to 
improve the classification system. These recommendations have not been implemented, 
but remain relevant today. 


30 The new national intelligence and security agency (Recommendation 2) will take a lead role 
in overseeing information sharing in a whole-of-system way to address the issues set out 
above. In the interim, the Department of the Prime Minister and Cabinet should (within 
the next six months) oversee the implementation of some of the recommendations of the 
Inspector-General of Intelligence and Security’s A Review of the New Zealand Security 
Classification System in 2018. These relate to the following aspects of security classification: 


a) expanding the classification system principles to provide that no information may 
remain classified indefinitely and that where there is doubt as to the classification level, 
information is classified at the lower level; 
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b) revising and strengthening Public sector agency guidance and developing training; 
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c) adopting a topic-based approach to systematic declassification of historic records; and 
d) developing indicators of function and performance of the classification system. 


31 Public sector agencies have not been fully using legislation to share information as 
systematically and widely as they might. This is particularly the case for the intelligence 
and security agencies, with only some direct access agreements having been entered into 
under the Intelligence and Security Act (Part 8, chapter 9). Public sector agencies holding 
information should prioritise entering into such agreements to ensure a well-functioning 
intelligence and security system. 


32 Public sector agencies involved in the counter-terrorism effort should consider whether 
they need more staff who have security clearance to access highly classified information. 
Agencies should ensure that their security cleared staff are able to easily access facilities 
and information management and technology systems to be able to review relevant highly 
classified information as required. This, however, should not be undertaken in place of 
shifting the Public sector mindset to see the “need to know” principle as enabling. Rather, 
it should be undertaken in conjunction with that shift in mindset to ensure that information 
is able to be shared and accessed more effectively. Special attention should also be given 
to the “need to know” principle as it applies to local government including the emergency 
management structures at the local and regional level. 


We recommend that the Government: 


g. Direct the new national intelligence and security agency (Recommendation 2), 
and in the interim the Department of the Prime Minister and Cabinet, to improve 
intelligence and security information sharing practices, including: 


a) driving a change in approach to the “need to know” principle across relevant 
Public sector agencies, with special attention given to local government 
including the emergency management structures at the local and regional level, 
ensure it enables rather than just restricts information sharing; and 
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b) overseeing the implementation, within six months, of recommendations in the 
2018 Review of the New Zealand Security Classification System; 


i) expanding the classification system principles to provide that no information 
may remain classified indefinitely and that, where there is doubt as to the 
classification level, information is classified at the lower level; 


ii) revising and strengthening Public sector agency guidance and developing 
training; 


iil) adopting a topic-based approach to systematic declassification of historic 
records; and 


iv) developing indicators of function and performance of the classification system. 


10. Amend the Intelligence and Security Act 2017 with respect to direct access 
agreements, to require the new national intelligence and security agency, and in 
the interim the Department of the Prime Minister and Cabinet, to regularly report to 
the responsible minister for the counter-terrorism effort on their establishment and 
implementation. 


11. Direct chief executives of Public sector agencies involved in the counter-terrorism 
effort to consider whether an appropriate number of their employees have security 
clearances and ensure that those staff have appropriate access to facilities and 
information management and technology systems to be able to review relevant 
material as required. 





33 


Making it easy for people to provide information, and to identify those who may 
need help 


A key reason for holding regular public conversations about extremism and preventing, 
detecting and responding to current and emerging threats of terrorism and violent 
extremism (Recommendation 15) is to ensure that everyone understands their role in the 
counter-terrorism effort. This includes knowing what to look out for and how to contribute, 
including reporting concerning behaviours or incidents. Success will require public 
knowledge of current risks and threats, and a simple pathway to allow people to report 
concerning behaviours or incidents to a single point within the Public sector that is 
promoted and visible. From there, the information would be passed on to the relevant 
agency (or agencies) whether it is a Public sector agency or non-government agency for 
assistance. Examples of such behaviours could be: 
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a) showing signs of stress and discussing participation in, or admiration for, extremist 
groups; or 






b) undertaking surveillance or taking pictures of places of worship, airports, community 
halls, shared community spaces, or transport hubs; or 
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c) asking unusually detailed questions about operations or design of buildings 
or systems; or 


d) making jokes about committing crimes or harmful acts. 


34 The purposes of reporting may include seeking support for the person or persons who may 
be vulnerable to radicalisation. 


35 This reporting system should be implemented in the next 12 months. We would expect that 
the government would publish annual reports on the extent of public reporting, and how the 
reported information was used. 


36 People will be confident about reporting potentially harmful behaviours if they know what 
to look for. We consider that New Zealanders could benefit from having access to reporting 
guidelines similar to those produced in the United States of America (see Part 7, chapter 2). 
Of course they would need to be designed to resonate with New Zealanders, and with 
New Zealand values and cultural norms. 


37 Success will also require a public conversation about the value of diversity in society 
(Recommendation 36 and 37). These conversations will reduce the likelihood that the biases 
that are sometimes held by people distort their perspectives of suspicious activity. 


We recommend that the Government: 


12. Develop and promote an accessible reporting system that enables members of the 
public to easily and safely report concerning behaviours or incidents to a single 
contact point within government. 


13. Develop and publish indicators and risk factors that illustrate for the public specific 
behaviours that may demonstrate a person’s potential for engaging in violent 
extremism and terrorism and update them regularly as the threatscape evolves. 
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Better evidence-based solutions to prevent and counter extremism, violent extremism 
and terrorism 


New Zealand needs to develop its own evidence-based solutions to prevent and counter 
extremism, violent extremism and terrorism, built on lessons from global experience. 

We conclude that it would be beneficial to foster a capability in New Zealand to conduct 
research and collaboration into these matters in New Zealand. If this happens, we would 
expect that over time, these researchers would establish a network that could collaborate 
with overseas counterparts. The Canadian Network for Research on Terrorism, Security and 
Society? is an example of an established organisation that provides research grants on issues 
related to counter-terrorism. The funding for this Network has diverse sources, including the 
Canadian government. 


We considered recommending the establishment of a new government research institute 

to undertake New Zealand-specific research and collaboration. However, we decided that 
this would be both expensive and perhaps ineffective. Such an agency would take time to 
establish and build capacity. It is likely to be more effective to draw on existing researchers 
who may have an interest in counter-terrorism issues. Consequently, we recommend that the 
government establish a mechanism to provide contestable research grants to New Zealand 
academics and researchers. We recommend that the new national intelligence and security 
agency (Recommendation 2) should be the fund holder for the contestable research grants, 
with research priorities decided by a panel comprising officials from that new agency and 
the Advisory Group on Counter-terrorism (Recommendation 7), with the Advisory Group 
representatives holding a majority membership of that selection panel. 





3 The Canadian Network for Research on Terrorism, Security and Society was founded in 2012. It supports research, and 
the dissemination of research, related to the threat of terrorism, security responses to terrorism, and the impact of both 
terrorism and securitisation on Canadian society. The organisation has three primary objectives: (1) to foster communication 
and collaboration between academic researchers in multiple disciplines on these topics; (2) to facilitate the interaction and 
collaboration of researchers and policy officials; and (3) to help cultivate a new and larger generation of scholars interested in 
these fields of study. 
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We recommend that the Government: 


14. Establish a programme to fund independent New Zealand-specific research on 
the causes of, and measures to prevent, violent extremism and terrorism with the 
following provisions: 


a) the national intelligence and security agency (Recommendation 2) should be 
provided with a multi-year appropriation for research funding; 


b) research priorities and grant recipients should be selected by a panel 
comprising officials from the new national intelligence and security agency 
(Recommendation 2) and representatives from the Advisory Group on 
Counter-terrorism (Recommendation 7), with Advisory Group representatives 
forming the majority of the selection panel; and 


c) grant recipients should be encouraged to publish and present the results of 
their research at the annual hui on issues related to extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism 
and terrorism (Recommendation 16). 
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2.4 We all have a role in making New Zealand safe and inclusive 


There is insufficient public discussion of and awareness about New Zealand’s National 
Security and Intelligence Priorities. There is also limited discussion about extremism and 
preventing, detecting and responding to current and emerging threats of violent extremism 
and terrorism in New Zealand. New Zealanders have important roles and contributions to 
make but this is neither clear nor publicly discussed. 


Public conversations about New Zealand’s National Security and Intelligence Priorities 
and countering extremism and terrorism will not only increase awareness and knowledge 
about the threats and risks facing New Zealand, but will also enhance some of our other 
recommendations (including development of a national counter-terrorism strategy, 
Recommendation 4). 


We see the first of these conversations (Recommendation 15) initiating what will become a 
cycle of information sharing, public engagement and scrutiny. It will enhance transparency. 
This initial public conversation (Recommendation 15) should commence in 2021 to inform 
the subsequent annual hui (Recommendation 16), the annual threatscape report and the 
National Security and Intelligence Priorities discussion (Recommendation 17). 


The conversations will address the balance to be struck between the privacy of individuals 
and the safety of individuals and communities. It should increase the social licence of Public 
sector agencies to address extremism. The conversations will also reinforce how diversity 
and inclusiveness contribute to social cohesion and wellbeing. 
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We recommend that the Government: 


15. Create opportunities to improve public understanding of extremism and preventing, 
detecting and responding to current and emerging threats of violent extremism 
and terrorism in New Zealand, led initially by the Minister for National Security and 
Intelligence, and including ongoing public discussions on: 


a) the nature of New Zealand’s counter-terrorism effort, including current risks and 
threats and how Public sector agencies protect New Zealanders from the threat and 
risk of terrorism; 


b) who is involved in the counter-terrorism effort and their roles, recognising that 
communities, civil society, local government and the private sector are all part of 
the counter-terrorism effort, including, but not limited, to being important sources 
of information; 


c) the need to strike the balance between the privacy of individuals and the safety of 
individuals and communities and to understand the social licence for Public sector 
agencies to engage in counter-terrorism and countering violent extremism activities; 


d) supporting the public to understand how to respond when they recognise the 
concerning behaviours and incidents that may demonstrate a person’s potential for 
engaging in violent extremism and terrorism; and 


e) how social cohesion, social inclusion and diversity contribute to an effective society. 


16. Direct the chief executive of the new national intelligence and security agency 
(Recommendation 2) to host an annual hui, to bring together relevant central and local 
government agencies, communities, civil society, the private sector and researchers 
(Recommendation 14) to create opportunities to build relationships and share 
understanding of countering violent extremism and terrorism. 


17. Require in legislation: 


a) the Minister for National Security and Intelligence to publish during every 
parliamentary cycle the National Security and Intelligence Priorities and refer them 
to the Parliamentary Intelligence and Security Committee for consideration; 


b) the responsible minister (Recommendation 1) to publish an annual threatscape 
report; and 


c) the Parliamentary Intelligence and Security Committee to receive and consider 
submissions on the National Security and Intelligence Priorities and the annual 
threatscape report. 
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45 


46 


47 


48 


49 


2.5 Fit for purpose laws and policies 


The Terrorism Suppression Act has never been subject to a comprehensive review of whether 
it is fit for purpose. A regular review of the Act, say every five years, should be provided 

for in the legislation. This will de-politicise any such review and enable any changes to the 
threatscape to be carefully considered regularly. 


What has also been missing to date is an holistic assessment of the nature of the risk 
associated with the pre-criminal space in which potential terrorists operate. New Zealand 
does not have precursor terrorism offences, which means that it is not an offence to be 
planning or preparing a terrorist attack (Part 8, chapter 13). An informed debate is necessary 
about whether the Terrorism Suppression Act strikes the appropriate balance between: 


a) providing the counter-terrorism agencies with the means to disrupt planning and 
preparation for terrorist attacks; and 


b) the risk of over-criminalisation. 


To enable such a debate, the Terrorism Suppression Act should be reviewed as soon as 
possible to ensure it is fit for purpose, with a particular focus on the lack of precursor 
terrorism offences. 


There are a number of issues with the Intelligence and Security Act, some of which limit 
the activities of the intelligence and security agencies. These should be prioritised in the 
scheduled legislative review. There should be a particular focus on whether any associated 
limits on the intelligence and security agencies are justified in light of their objective to 
contribute to the protection of New Zealand’s national security. 


For the most part, the issues we have identified with the Intelligence and Security Act 
(Part 8, chapter 14) can be resolved during the scheduled legislative review. The exception 
is section 19 of the Intelligence and Security Act, which we consider requires urgent 
legislative attention for reasons explained in chapter 14 of Part 8. 


We also recommend that other legislation relating to counter-terrorism be reviewed and 
updated. For example, relevant legislation should be reviewed and amended to enable 
New Zealand to accede to and implement the Budapest Convention on Cybercrime. 
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We recommend that the Government: 


18. Review all legislation related to the counter-terrorism effort (including the Terrorism 
Suppression Act 2002 and the Intelligence and Security Act 2017) to ensure it 
is current and enables Public sector agencies to operate effectively, prioritising 
consideration of the creation of precursor terrorism offences in the Terrorism 
Suppression Act, the urgent review of the effect of section 19 of the Intelligence and 
Security Act on target discovery and acceding to and implementing the Budapest 
Convention. 
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Chapter 3: Recommendations to improve 
New Zealand’s firearms licensing system 


Our Terms of Reference restricted us from inquiring into or making recommendations 

on amendments to firearms legislation. In addition, amendments to the Arms Act 1983 
were passed in 2019 and 2020. The scope for recommendations in relation to firearms is, 
therefore, more limited than would otherwise be the case. It is nonetheless critical that 
policies remain fit for purpose. 


The firearms licensing system needs to be exacting to ensure that the risk of inappropriate 
people having firearms is mitigated. There are a number of issues with New Zealand’s 
firearms licensing system, not all of which have been addressed by the recent legislative 
amendments (Part 5, chapter 4). 


To address these issues we recommend changes that will result in a more efficient and 
effective, risk-based firearms licensing system, including: 


a) the consistent application of the fit and proper person test across police Districts; 


b) more highly skilled and better trained licensing staff who can exercise evaluative 
judgements about risks and how to deal with them, supported by better policies and 
operational guidance; and 


c) improved risk-based management of applicants who have recently arrived in 
New Zealand, including by requiring applicants who have lived outside of New Zealand 
for substantial periods of time in the ten years preceding the application to produce 
police or criminal history checks from countries in which they have previously resided. 
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We recommend that the Government: 


19. 


20. 


21. 


22. 


23. 


Direct New Zealand Police (or other relevant entity) to make policies and 
operational standards and guidance for the firearms licensing system clear and 
consistent with legislation. 


Direct New Zealand Police (or other relevant entity) to introduce an electronic 
system for processing firearms licence applications. 


Direct New Zealand Police (or other relevant entity) to ensure firearms licensing 
staff have regular training and undertake periodic reviews of the quality of their 
work. 


Direct New Zealand Police (or other relevant entity) to introduce performance 
indicators that focus on the effective implementation of the firearms licensing 
system. Key indicators should include: 


a) regular performance monitoring of firearms licensing staff to ensure national 
standards are met; and 


b) public confidence in the firearms licensing system is increased (as measured by 
New Zealand Police citizens’ satisfaction survey reports or similar mechanism). 


Direct New Zealand Police (or other relevant entity) to require two new processes in 
the case of applicants who have lived outside of New Zealand for substantial periods 
of time in the ten years preceding the application: 


a) applicants should be required to produce police or criminal history checks from 
countries in which they have previously resided; and 


b) Firearms Vetting Officers should interview family members or other close 
connections in other countries using technology if the applicant does not have 
near relatives or close associates living in New Zealand. 


24. Introduce mandatory reporting of firearms injuries to New Zealand Police by health 


professionals. 
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Chapter 4: Recommendations to support 
the ongoing recovery needs of affected whanau, 
survivors and witnesses 


4.1 Ongoing support for affected whanau, survivors and 
witnesses required 


We heard from affected whanau, survivors and witnesses of the 15 March 2019 terrorist 
attack that, in addition to the grief and suffering they are dealing with, they also face the 
complexities of navigating the Public sector systems of support (Part 3, chapter 3). We heard 
that there is a lack of coordination between Public sector agencies. 


Some affected whanau, survivors and witnesses will need ongoing wellbeing support for 
years to come. We understand some support for some affected whanau, survivors and 
witnesses has been either not offered or scaled back. The government must not shy 
away from delivering support on an ongoing basis in an effective, efficient and culturally 
appropriate manner. 


To reduce the burden arising from the lack of coordination in Public sector support (Part 3, 
chapter 3), each affected whanau, survivor and/or witness should be assigned a continuing 
single point of contact or navigator. While some navigator services were provided in the 
initial period following the terrorist attack, support has since significantly diminished. 
Services are provided in a light-touch way with less face-to-face engagement. 


We see a long-term role for navigators to work with affected whanau, survivors and witnesses 
to coordinate Public sector support and help to reduce the complexities of dealing with 
multiple agencies. This should also include consideration of establishing a Collective Impact 
Network and Board or other appropriate mechanism that enables Public sector agencies, 
non-government organisations and affected whanau, survivors and witnesses to agree a 
specific work programme to provide ongoing wrap-around services to affected whanau, 
survivors and witnesses.* Deciding the optimal organisational form would be best worked 
through by Te Kawa Mataaho Public Service Commission in conjunction with relevant Public 
sector agencies. 





4 ACollective Impact Network and Collective Impact Board are solutions provided in a system design toolkit for Public sector 
agencies addressing cross-agency problems, where a third layer approach is required in which agencies are working together at 
the frontline or community level. See Te Kawa Mataaho Public Service Commission System design toolkit for organising around 
shared problems (2018) https://www.publicservice.govt.nz/assets/Legacy/resources/sdt-cover.pdf 
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We recommend that the Government: 


25. Direct the Ministry of Social Development to work with relevant Public sector 
agencies including the Accident Compensation Corporation, Immigration New 
Zealand, the Ministry of Justice, New Zealand Police and non-government 
organisations to facilitate coordinated access to ongoing recovery support for 
affected whanau, survivors and witnesses of the 15 March 2019 terrorist attack, 
including assigning each whanau, survivor or witness a continuing single point of 
contact who will navigate all required Public sector support on their behalf. 


26. Investigate establishing a Collective Impact Network and Board or other relevant 
mechanism that enables Public sector agencies, non-government organisations and 
affected whanau, survivors and witnesses to agree a specific work programme to 
provide ongoing wrap-around services to affected whanau, survivors and witnesses. 





5 We were asked to consider combining any further legal processes that affected whanau, 
survivors and witnesses may wish to go through into a single restorative process to support 
affected whanau, survivors and witnesses in their recovery (Part 3, chapter 3). For example, 
this could include a restorative justice process with those affected whanau, survivors and 
witnesses who wish to engage with the individual, noting that such a restorative justice 
process would require the individual being willing to take part. 


6 There may be further legal and other processes that affected whanau, survivors and 
witnesses wish to engage in too. We consider it critical that affected whanau, survivors and 
witnesses are engaged with in an empowering way - that is, they are given the opportunity 
to collaborate in the design and delivery of such processes. This may require special 
legislation. This will help minimise the trauma that may come with participating in further 
processes in which they need to share their stories and evidence, while supporting their 
recovery and ensure a fair and just outcome. 


We recommend that the Government: 


27. Direct the Department of the Prime Minister and Cabinet in collaboration with 
relevant Public sector agencies discuss with affected whanau, survivors and 
witnesses of the 15 March 2019 terrorist attack what, if any, restorative justice 
processes might be desired and how such processes might be designed and 
resourced. 
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4.2 Other matters relating to affected whanau, survivors 
and witnesses 


A few submissions asked us to consider recommending compensation or other reparations 
for affected whanau, survivors and witnesses. We did not consider that the question of 
financial support, compensation or ex gratia payments fitted easily within our Terms of 
Reference. We leave them for direct discussion between those affected whanau, survivors 
and witnesses and the government in light of the conclusions reached in this report. 
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Chapter 5: Recommendations to improve social 
cohesion and New Zealand’s response to our 
increasingly diverse population 


5.1 Overview 


Societies that are polarised around political, social, cultural, environmental, economic, 
ethnic or religious differences provide conditions in which radicalising ideologies develop 
and flourish. Social cohesion is desirable for many reasons, one of which is that it is critical 
to preventing the development of harmful radicalising ideologies and downstream violent 
extremism. We have given much thought to this. Improvements in the approach of Public 
sector agencies towards promoting social cohesion will make a significant contribution to the 
prevention of extremism and thus violent extremism. 


In a COVID-19 Recovery environment there will be increased stress and an economic 
downturn, potentially increased inequalities and heightened vulnerabilities. Our 
recommendations are designed to assist with building a New Zealand where all people feel 
recognised, respected and accepted, free from prejudice and discrimination and have the 
resources, skills and knowledge to meaningfully participate in decision-making processes. 


New Zealand has seen considerable social change in recent decades. Successive 
governments have recognised Te Tiriti o Waitangi as a founding document of New Zealand’s 
constitutional arrangements. The Waitangi Tribunal established in 1975 provides an avenue 
for historical and contemporary claims under Te Tiriti o Waitangi to be considered. 

Specific laws include recognition of the principles of Te Tiriti o Waitangi. Case law has also 
provided recognition of Te Tiriti o Waitangi in decision-making processes. Te Arawhiti, a 
departmental agency of the Ministry of Justice, was established to ensure that the Crown 
meets its Te Tiriti o Waitangi settlement commitments. The Public Service Act recognises 
the role of the Public sector to support the Crown in its relationships with Maori under 

Te Tiriti o Waitangi. The next step will be to see government action that focuses on upholding 
Te Tiriti o Waitangi. 


Government leadership is now also required to drive a social shift to see New Zealand 
society embrace the opportunities that social cohesion and New Zealand’s changing 
demographics bring. 


5.2 Strong government leadership and direction are required 


Coherent leadership at both ministerial and departmental levels is required. It was not 
clear before 15 March 2019 which minister or Public sector agency provided oversight. 

In September 2019 Cabinet identified that the minister for social development and the 
Ministry of Social Development were best placed to coordinate and lead government action 
on social inclusion. 
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6 In November 2020 a new ministerial portfolio (outside Cabinet) was created for diversity, 
inclusion and ethnic communities. However, we see the issues of social cohesion, social 
inclusion and diversity as involving all New Zealanders not just its ethnic communities. 
Strong policy support will be required to deliver on these initiatives. As outlined we do 
not see the Office of Ethnic Communities, as presently organised and funded, having the 
capability required to support a policy work programme relating to social cohesion and 
inclusion. 


7 While there is much government activity, there is a need for a purposeful and overarching 
strategy that can define what government is trying to achieve, identify what actions are 
being undertaken and areas for improvement. A draft framework has been developed to 
bring a common understanding, vision and outcomes for social inclusion across government. 
A monitoring and evaluation regime is being scoped. Public discussion about the draft 
framework with a targeted group of stakeholders is planned. 


8 Missing from these positive developments are the voices of communities, civil society, local 
government and the private sector. We recommend a national dialogue on social cohesion, 
including social inclusion, to inform the development of a framework and monitoring and 
evaluation regime. We expect the government to collaborate with communities, civil society, 
local government and the private sector in developing its overarching framework and 
monitoring and evaluation regime and to have an ongoing role in this area of work. 


We recommend that the Government: 


28. Announce that the Minister for Social Development and Employment and 
the Ministry of Social Development have responsibility and accountability for 
coordinating a whole-of-government approach to building social cohesion, 
including social inclusion. 


29. Direct the Ministry of Social Development to discuss and collaborate with 
communities, civil society, local government and the private sector on the 
development of the social cohesion strategic framework and a monitoring and 
evaluation regime. 





9 The Office of Ethnic Communities is the government’s principal advisor on ethnic 
communities in New Zealand. In that role, it must look forward and provide advice about 
future challenges and opportunities New Zealand faces. We would expect to see a high 
performing Office of Ethnic Communities excelling in not only providing support and 
services to ethnic communities, but also acting as an influencer within the Public sector by 
demonstrating an ability to help shape well-informed policies that recognise the needs of 
ethnic communities. 
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The Office of Ethnic Communities has been unable to effectively fulfil these functions, and has 
been repeatedly recognised as underperforming. Despite being restructured in 2014, and 
again in 2016, its effectiveness has been significantly hampered by its limited resources. Its 
influence, visibility and standing in the Public sector were limited. The current organisational 
form is impacting on its effectiveness and should be changed. 


We considered recommending that the Office of Ethnic Communities be replaced by a new 
Public service department. The government may wish to consider this option, along with 
other machinery of government options as provided for in the Public Service Act 2020. 
Deciding the optimal organisational form would be best worked through by Te Kawa Mataaho 
Public Service Commission in conjunction with relevant Public sector agencies. We do not 
therefore offer a prescriptive recommendation. We focus our recommendations on the 
capability required for an agency focused on ethnic communities and multiculturalism to be 
effective rather than its form. 


The responsible Public sector agency needs to be able to achieve excellence in: 


a) promoting the wellbeing of ethnic communities by providing advice to the Public 
sector and the government about challenges and priorities, including strategic advice 
that relates to medium to long term trends in factors that affect wellbeing in ethnic 
communities; 


b) collating and using data to analyse, monitor and evaluate where Public sector efforts 
could increase the wellbeing of ethnic communities, what those efforts should look like, 
and how they should be prioritised; and 


c) leading the development and dissemination of an evaluation framework that 
incorporates performance indicators to monitor and evaluate the impact and 
effectiveness of government policies and programmes on the wellbeing of ethnic 
communities. 
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We recommend that the Government: 


30. Investigate the machinery of government options for an agency focused on ethnic 
communities and multiculturalism and establish a fit for purpose organisational 
design that will encompass the current functions expected of the Office of Ethnic 
Communities and enable the new responsible Public sector agency to focus on and 
perform the following functions: 


a) advise the government and Public sector agencies about priorities and 
challenges that affect ethnic communities’ wellbeing; 


b) collate and use data to analyse, monitor and evaluate Public sector efforts to 
improve the wellbeing of ethnic communities, what those efforts should be and 
how they should be prioritised; and 


c) develop an evaluation framework that incorporates performance indicators that 
examine the impact and effectiveness of government policies and programmes 
on the wellbeing of ethnic communities. 





5.3 Engaged and accountable government decision-making 


Data analysis, monitoring and evaluation 


To build social inclusion in a rapidly diversifying society, Public sector agencies need to 

be able to collect the right data on New Zealand’s population to enable analysis of the 
implications of New Zealand’s rapidly changing ethnic and religious demographics and the 
development of appropriate policy responses. 


Such data is also required to explain the benefits and impacts of these demographic changes 
on society. It will provide an evidence base to understand the important linkages between 
social cohesion, social inclusion and diversity on the one hand, and wellbeing and economic 
and business prosperity on the other. These linkages must inform policy decisions across 
the Public sector. They are complex and critical to New Zealand’s future success as a nation. 
This criticality is partly a result of our small population, and geographic isolation. Diversity 
can bring the people-to-people connections within and outside New Zealand that drive 
innovation, trade and investment. 


The collection and analysis of data will require people with the skills, influence and resources 
to shape social and economic policy across the Public sector so that it promotes policies that 
advance social cohesion in a rapidly diversifying society. 
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16 Cabinet has agreed that social inclusion will be included as a goal in the government’s 
planning for the post COVID-19 Recovery and a social inclusion framework is being 
developed. Work is also underway on exploring measures and indicators of social inclusion. 
This work is being undertaken alongside other existing measurement frameworks, including 
the Living Standards Framework. It is important that this work encompasses social cohesion 
indicators, is prioritised and gains and maintains momentum. 


17 More evaluation of the effectiveness of government policies and programmes is necessary. 
New Zealand academic research points out that the lack of evaluation inhibits the adaptation 
of national policies as society changes. It also lays government open to the “unthinking 
perpetuation of policies, pushing problems on to future generations”. The problem was 
highlighted in a report by the then Prime Minister’s Chief Science Advisor, who concluded 
that “the quality of assessment and evaluation of policy implementation is quite variable. 
The required scrutiny can be devalued by agencies that assume their primary mandate is to 
implement political decisions. As a result, funding for evaluation is frequently trimmed or 
diverted.”® This systemic deficiency has been periodically recognised, but various attempts 
to improve the situation have come to little. The resistance to independent evaluation seems 
entrenched in the incentives of the public management system. 


18 Independent evaluation will mean better informed decisions and ensure that the benefits 
of government policies and programmes can be shared equitably.’ In particular, Public 
sector agencies must also ensure that the implementation of policies and delivery of 
services impacting ethnic communities are monitored and evaluated. Evaluation is critical 
to understand the impacts of policies over the medium and long term and to improve public 
services. 


We recommend that the Government: 


31. Prioritise the development of appropriate measures and indicators (such as the 
Living Standards Framework) of social cohesion, including social inclusion. 


32. Require Public sector agencies to prioritise the collection of data on ethnic and 
religious demographics to support analysis and advice on the implications of 
New Zealand’s rapidly changing society, inform better policy making and enhance 
policy evaluation. 








5 Transparency International New Zealand New Zealand National Integrity System Assessment - 2018 update (May 2019) at 
page 166 https://www.transparency.org.nz/wp-content/uploads/2019/05/National-Integrity-System-Assessment-2018-update- 
full-report. pdf 

® Office of the Prime Minister’s Science Advisory Committee The role of evidence in policy formation and implementation 
(September 2013) https://www.pmcsa.org.nz/wp-content/uploads/The-role-of-evidence-in-policy-formation-and- 
implementation-report.pdf. 


7 RF Inglehart and P Norris Trump, Brexit, and the Rise of Populism: Economic Have-Nots and Cultural backlash (2016). 
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22 


Workforce diversity and cultural competency 


Overall the New Zealand Public service is diversifying and this must continue to be a priority 
for all Public sector agencies. As at June 2019 the demographics of the total Public service 
largely reflected those of the New Zealand population. However, the position is different 

in respect of Public sector chief executives and those in senior leadership positions 

(first, second and third tiers) and Public sector agencies involved in the counter-terrorism 
effort, where workforce diversity figures are low. This should be a continuing focus for the 
Public Service Commissioner and the chief executives of the Public sector agencies involved 
in the counter-terrorism effort. The Advisory Group on Counter-terrorism would be well 
placed to provide advice and assistance to the chief executives. 


The new Public Service Act provides mechanisms that will focus attention on the Public 
sector’s workforce capacity and capability. The Act outlines the principle that the group 
comprising all Public service employees should reflect the make-up of society and requires 
the Public Service Commissioner to work with Public sector chief executives to develop a 
highly capable workforce that reflects the diversity of the society it serves. It also requires 
the Public Service Commissioner to provide a briefing to the minister for the public service 
on workforce issues every three years. These briefings must be tabled in the House of 
Representatives. The Public Service Act also enables the Public Service Commissioner to 
develop advice and guidance on workforce matters that can target relevant Public sector 
agencies. 


Papa Pounamu (outlined in Part 9, chapter 3) is a worthwhile venture that must continue 

to drive improving the Public sector’s workforce diversity. There are now mandatory 
requirements for Public sector agencies to plan and report on diversity including the five 
Papa Pounamu workforce diversity priority commitments. This will provide transparency 
regarding the actions the Public sector leadership is taking and help identify areas for 
improvement. This is a major shift and will support the Public sector workforce to have the 
competencies to engage with communities. While work is underway, more could be done to 
boost these efforts. 


Current requirements focus on the individual agencies with a three-yearly report 

provided by the Public Service Commissioner to the minister. What is missing is an 
overarching publicly available annual report that provides a comprehensive view of progress 
by Public sector agencies involved in the counter-terrorism effort on the Papa Pounamu 
commitments. Independent annual reports that provide a comprehensive view on all 

Public sector agencies’ progress would be valuable too. 
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We recommend that the Government: 


33. Direct the chief executives of the Public sector agencies involved in the 
counter-terrorism effort to continue focusing efforts on significantly increasing 
workforce diversity, including in leadership roles, and in consultation with the 
Advisory Group on Counter-terrorism (Recommendation 7). 


34. Encourage the Public Service Commissioner to publish an annual report that: 


a) provides a comprehensive view of progress by the Public sector on the 
Papa Pounamu commitments including the identification of areas where those 
Public sector agencies are performing well, areas where improvements can be 
made and critical insights across all agencies about where to direct their efforts; 
and 


b) prioritises reporting on progress made by the Public sector agencies involved in 
the counter-terrorism effort. 


35. Encourage the Public Service Commissioner to continue focusing efforts on 
significantly increasing workforce diversity and attracting diverse talent for Public 
service leadership roles at the first, second and third-tiers. 





23 


24 


25 


Diversity and education 


New Zealand’s education system provides an opportunity to empower children and young 
people by providing them with skills to understand diversity, consider more inclusive 
approaches and self-regulate. Education can also provide young people with the skills to 
participate in society more effectively which contributes to social cohesion. This should 
remain a priority for New Zealand’s early childhood and education system. 


For younger members of society, schooling is an important way to increase knowledge and 
understanding of New Zealand’s history, culture, diversity and future opportunities. We 
know that our young people take new knowledge and information back into their whanau 
and communities and have conversations with them - as has been seen in community 
conversations on the use of plastics and climate change. For young and older members of 
whanau and communities, those previously challenging conversations are becoming more 
familiar. 


As New Zealand looks ahead there is an opportunity to build and enhance our social 
infrastructure and resilience in the same way that physical infrastructure is being invested 
in. There is a strong case for increased focus on teaching the benefits of diversity and 
social inclusion. 
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We recommend that the Government: 


36. Invest in opportunities for young New Zealanders to learn about their role, rights 
and responsibilities and on the value of ethnic and religious diversity, inclusivity, 
conflict resolution, civic literacy and self-regulation. 





5.4 Weall have a role in making New Zealand safe and inclusive 


Conversations about ethnic and religious diversity 


26 Public conversations about embracing diversity and encouraging social cohesion should be 
led by political leaders and the government. There should be transparent conversations 
where information is available to everyone. These conversations need to include all 
communities - across the length and breadth of the country, both rural and urban. Enduring 
change will take time and investment, so these conversations will need to be ongoing. 


We recommend that the Government: 


37. Create opportunities for regular public conversations led by the responsible 
Minister - the Minister for Social Development and Employment - for all 
New Zealanders to share knowledge and improve their understanding of: 


a) social cohesion, including social inclusion, and the collective effort required to 
achieve these; and 


b) the value that ethnic and religious diversity can contribute to a well-functioning 
society. 





Improved community engagement across the Public sector 


27 Building social cohesion and social inclusion requires ongoing collaboration. Public sector 
agencies developing social cohesion and social inclusion policies and programmes should 
collaborate with communities in developing these policies and programmes. Communities 
play a pivotal role in building and maintaining social cohesion. This is especially true 
of community leaders, as they build a sense of identity and validate people’s collective 
understanding of shared social norms and experiences. We recommend greater focus on 
empowering communities to participate in central and local government decision-making 
processes. 


28 Public sector agencies need to increase their engagement capability and ensure that all 
communities have opportunities to contribute to the development of services, policies 
and practices that affect them. There needs to be a shift from simply communicating with 
communities to genuinely engaging in an open, inclusive and transparent way. The default 
Public sector agencies’ practice for community engagement needs to shift away from the 
inform and consult end of the International Association for Public Participation IAP2 Public 
Participation Spectrum, to more of a focus on involved, collaborative and empowering 
engagement. This is consistent with the commitments New Zealand has made to have “a 
government that is open, inclusive and responsive and citizens who willingly get involved in 
issues that are important to them”.® 


29 += This will require greater upfront time and resources from Public sector agencies but will 
lead to sustainable solutions that better meet the needs of and serve communities. These 
approaches to engagement will also help to build communities’ trust and confidence in 
Public sector agencies, as their success relies on relationships being built and maintained, 
rather than one-off, transactional engagement. 


30 «It is important that Public sector agencies are able to communicate why the level of 
engagement they are undertaking is appropriate in the circumstances. This will improve the 
quality of community engagement and policy decisions to be taken, help communities to 
understand the degree of influence they have in a decision-making process and provide the 
transparency needed to build trust and confidence. 


We recommend that the Government: 


38. Require all Public sector community engagement to be in accordance with 
New Zealand’s Open Government Partnership commitments and in particular: 


a) require agencies to be clear about the degree of influence that community 
engagement has on associated decision-making by indicating to communities 
where the engagement sits on the International Association for Public 
Participation JAP2 Public Participation Spectrum; and 


b) encourage agencies to undertake more “involve” and “collaborate” levels 
of engagement in accordance with the International Association for Public 
Participation IAP2 Public Participation Spectrum. 
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5.5 Fit for purpose laws and policies 


31 Aninclusive society must act against behaviours that are harmful and divisive. This requires 
unacceptable behaviour to be called out and, in certain circumstances, criminalised. 


32 New Zealand’s legal system does not adequately deal with hate crime and hate speech. 
The current laws do not appropriately recognise the culpability of hate-motivated offending, 
nor do they provide a workable mechanism to deal with hate speech. Change is required to 
both the law and New Zealand Police practice (Part 9, chapter 4). 


33 The Crime and Disorder Act 1998 (United Kingdom) provides a useful example of legislation 
that sees hate-motivated offences result in much higher penalties than for the underlying 
offences and ensures the appropriate recording of these offences. 


34 This could be achieved in New Zealand by amending sections 4 (offensive behaviour or 
language), 9 and 10 (assault), 11 (wilful damage) and 21 (intimidation) of the Summary 
Offences Act 1981 and sections 188-194, 196-197 and 202C (assaults), 267 (arson) and 
269 (intentional damage) of the Crimes Act 1961 to reflect the additional culpability of 
hate-motivated offending. 


We recommend that the Government: 


39. Amend legislation to create hate-motivated offences in: 


a) the Summary Offences Act 1981 that correspond with the existing offences of 
offensive behaviour or language, assault, wilful damage and intimidation; and 


b) the Crimes Act 1961 that correspond with the existing offences of assaults, arson 
and intentional damage. 





35 Section 131 of the Human Rights Act 1993, which criminalises certain types of hate speech, 
is not fit for purpose. The section as written unacceptably impinges on the right of freedom 
of expression. The words “excite hostility against or bring into contempt” set a low liability 
threshold. Accordingly it has invited rewriting by the courts, but in a way that has resulted 
in considerable uncertainty. More generally it does not provide a credible foundation for 
prosecution. 


36 We propose a reframed offence that more accurately targets behaviour warranting criminal 
prosecution and that encompasses hate speech directed at religious affiliation. 
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37. This offence should be included in the Crimes Act, rather than the Human Rights Act, to 
reflect the seriousness of the offences and increase the resulting penalty. It should be 
reframed to focus on stirring up or provoking hatred against a group of persons defined by 
protected characteristics, which should include religious affiliation. 


38 Sharpening the focus of the section 131 offence would mean that the offence would not 
discharge New Zealand’s obligations under article 4 of the International Convention on 
the Elimination of All Forms of Racial Discrimination. Substantial compliance could be 
achieved if the definition of “objectionable” in section 3 of the Films, Videos, and Publications 
Classification Act 1993 was amended to include racial superiority, racial hatred and racial 
discrimination. 


We recommend that the Government: 


40. Repeal section 131 of the Human Rights Act 1993 and insert a provision in the Crimes 
Act 1961 for an offence of inciting racial or religious disharmony, based on an intent 
to stir up, maintain or normalise hatred, through threatening, abusive or insulting 
communications with protected characteristics that include religious affiliation. 


41. Amend the definition of “objectionable” in section 3 of the Films, Videos, and 
Publications Classification Act 1993 to include racial superiority, racial hatred and 
racial discrimination. 





39 In our discussions with communities we heard many stories of the lack of data about 
hate-motivated offences and harmful behaviour. 


40 Over the last two years, New Zealand Police have made progress in improving their records in 
relation to hate-motivated offending and work on this is continuing. There are, however, still 
some shortcomings that could be addressed by further improvements to recording systems 
and additional training. 
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We recommend that the Government: 


42. Direct New Zealand Police to revise the ways in which they record complaints of 
criminal conduct to capture systematically hate-motivations for offending and train 


frontline staff in: 


a) identifying bias indicators so that they can identify potential hate crimes when 
they perceive that an offence is hate-motivated; 


b) exploring perceptions of victims and witnesses so that they are in a position to 
record where an offence is perceived to be hate-motivated; and 


c) recording such hate-motivations in a way which facilitates the later use of 
section 9(1)(h) of the Sentencing Act 2002. 
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Chapter 6: Recommendations for implementation 


6.1 Overview 


1 This chapter makes a number of recommendations for implementation. 


6.2 Timing of implementation 


2 Some recommendations should be able to be implemented relatively quickly, such as 
assigning ministerial responsibility (Recommendations 1 and 43), establishing funding 
(Recommendation 14) and the formation of forums that enable community voices to 
influence decision-making (Recommendations 7 and 44). Implementation of other 
recommendations may take more time, to enable public conversations to take place 
(Recommendations 15 and 37), establishing a new agency (Recommendation 2) and reviewing 
legislation (Recommendations 18, 39, 40 and 41). 


3. Some outcomes may only become evident over a period of years - in particular, trust and 
confidence in Public sector agencies involved in the counter-terrorism effort will not increase 
overnight. 


6.3 Strong government leadership and direction are required 


4 The recommendations we make cover a number of Public sector agencies and ministerial 
portfolios. As we have explained we see our recommendations as a package. As such they 
would be best implemented under the leadership of one minister who would coordinate 
with all ministers responsible for the implementation of the recommendations. The same 
minister would be responsible for communicating the government’s implementation plan 
and providing regular progress reports to New Zealanders. Advice provided by Public sector 
agencies on the government’s implementation plan should be proactively released. 


We recommend that the Government: 


43. Ensure a minister is given responsibility and accountability to lead and coordinate 
the response to and implementation of our recommendations and announce the 
appointment. 





6.4 We all have a role in making New Zealand safe and inclusive 


5  Toassist social change, rebuild trust and confidence in Public sector agencies and 
particularly those involved in the counter-terrorism effort and enhance social licence of the 
counter-terrorism effort, communities, civil society, local government and the private sector 
should be involved in the design of the government’s implementation plan. The members of 
our Muslim Community Reference Group could assist although wider community involvement 
will also be required. 
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6 We cannot see how trust can be rebuilt within ethnic and religious communities without their 
active participation in the design and implementation of the solutions we have proposed. 
We have engaged with affected whanau, survivors and witnesses and Muslim communities 
and their views have informed our recommendations. Engagement of the kind we have 
participated in and which we envisage for the future goes beyond current Public sector 
practice of inform or consult. It requires involvement, collaboration and empowerment of 
New Zealanders as we described in chapter 5. It will also mean a substantial commitment 
of time and resources and perhaps a mindset change. But it will have the advantage that the 
outcome will have the support of those whose trust is critical to securing a safer and more 
inclusive New Zealand. 


7 We recommend the establishment of an oversight group that includes representatives of 
communities, civil society, local government, the private sector, affected whanau, survivors 
and witnesses and our Muslim Community Reference Group. The make-up of the oversight 
group would include a gender balance, ethnic and religious diversity, a range of ages (youth, 
adults and elders) and geographical spread. 


8 It will be responsible for providing advice to the responsible minister (Recommendation 43) 
on the design of the government’s implementation plan and its roll-out. Their advice, and 
that of Public sector agencies, is to be made publicly available to enhance transparency. 





We recommend that the Government: 


44. Establish an Implementation Oversight Advisory Group that: 
a) 


b) 


c) 


includes representatives of communities, civil society, local government, 
the private sector, affected whanau, survivors and witnesses and our 
Muslim Community Reference Group; 


provides advice to the responsible ministers (Recommendations 1 and 43) 
on the design of the government’s implementation plan and its roll-out; and 


publishes its advice to enhance transparency. 
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Glossary 


Term 


authorising environment 


Definition 


The environment that provides authority for a Public sector 
agency to operate effectively. Formal sources of authority 
include legislation, Cabinet decisions and budget approvals. 
Informal sources of authority include ministers, central 
agencies, other Public sector agencies, stakeholders, 
communities, civil society and the private sector. 





civil society 


The space for collective action on shared interests, 
purposes and values. It is the third sector of society, along 
with government and business. It comprises civil society 
organisations and non-governmental organisations. 





community engagement 


The process of working with communities to address issues 
affecting their wellbeing. 





counter-terrorism 
agencies 


New Zealand Police and the New Zealand Security Intelligence 
Service. 





counter-terrorism effort 


Counter-terrorism activities undertaken by relevant Public 
sector agencies to detect terrorists and disrupt their 
organisation, planning, preparation and attacks. 





cultural competency 


The ability to understand, communicate with and effectively 
interact with people across cultures, by a person aware of 
their own worldview and recognising and valuing cultural and 
social norms and differences. Culture can include ethnicity, 
nationality, age, gender identity, sexual orientation, disability, 
religious or faith affiliation. 








diversity Differences in individuals’ and groups’ traits and 
characteristics, such as ethnicity, gender identity, sexual 
orientation, age and disability. 

hui Te reo Maori (Maori language) term for a meeting or gathering. 





Public sector agency 


In general, a Public sector agency Is an organisation that works 
for the government of New Zealand. 


In this report, “Public sector agencies” means the 217 
organisations listed in the appendix. 
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Term 


Public sector agencies 
involved in the counter- 
terrorism effort 


Definition 


The Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service. 





Recovery 


One of the 4Rs. Recovery activities are focused on bringing 
about the immediate, medium-term and long-term recovery of 
individuals and communities after a national security event. 





social cohesion 


A socially cohesive society is one in which all individuals 
and groups have a sense of belonging, social inclusion, 
participation, recognition and legitimacy. 





social inclusion 


The process of improving how individuals and groups 
participate in and contribute to society on their own terms. 





Te Tiriti o Waitangi 


Te reo Maori (Maori language) name for the Treaty of Waitangi 
- New Zealand’s founding document signed by Maori and the 
British Crown in 1840. 





threat 


A source of potential damage or danger. 





threatscape 


The threat environment. 





wider counter-terrorism 
effort 


Public sector agencies that contribute to or support the 
counter-terrorism effort, including: 


- the agencies involved in the counter-terrorism effort 
(the Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service); 
and 


agencies who can play a role in supporting counter-terrorism 
activities where it overlaps with their functions, including 
Public sector agencies (such as the Department of Internal 
Affairs, the Ministry of Education and the Ministry of Foreign 
Affairs and Trade). 
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End note 


This report provides an independent account of what happened in the lead up to the 
15 March 2019 terrorist attack, what, if anything, could have been done to stop it and what 
must now be done to better protect New Zealanders. 


From the terrible events of the 15 March 2019 terrorist attack comes the responsibility 
to reflect and learn. 


The first duty of government remains the security of its people. However, national security 
is not the remit of the intelligence and security and law enforcement agencies alone. Many 
Public sector agencies also have a role to play. But importantly so too do communities, 

civil society, local government and the private sector. New Zealanders can play a vital role 
in countering terrorism and extremism. To play that role, New Zealanders must be informed 
about the issues and what they can do to help. 


With this in mind, we have included in our report a vast amount of material previously 
classified as Top Secret or Secret. We have done so to bring into the light how 

New Zealand’s counter-terrorism effort actually works. This will enable future debate to 
be well informed. We see such informed debate as fundamental to the social licence and 
thus the effectiveness of the counter-terrorism effort. 


We recognise that we have finalised our analysis and report in the shadow of COVID-19. 

The pandemic has impacted all communities and has been a stark reminder of the need for 
community resilience and social infrastructure. It has also been a bright illustration of what 
can be achieved when society acts collectively in the broader public interest. 


Fundamental to New Zealand’s future wellbeing and security is social cohesion. While social 
cohesion in New Zealand is much higher than many other countries, there are fault lines. 
Maintaining and enhancing social cohesion is a vital task for government. We are confident 
that the will is there. We have provided mechanisms in our recommendations for that will to 
be realised. 


These changes will not be easy, but we have laid down the wero and we urge the Government 
to take up the challenge and act. 
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Glossary 

Term Definition 

4chan An image-based message board on the internet where anyone 
can post comments and share images anonymously. 

4Rs New Zealand’s integrated approach to national security 
includes four areas of activity known as the 4Rs - Reduction, 
Readiness, Response and Recovery. 

8chan A website composed of user-created message boards similar 


in structure to 4chan. 





agencies involved in the 
counter-terrorism effort 


The Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service. 





Al Qaeda 


An Islamist extremist terrorist organisation, which was 
responsible for the 11 September 2001 terrorist attacks on the 
United States of America. 





assessment agencies 


The Combined Threat Assessment Group (hosted by the 

New Zealand Security Intelligence Service) and the National 
Assessments Bureau (in the Department of the Prime Minister 
and Cabinet). 





authorising environment 


The environment that provides authority for a Public 

sector agency to operate effectively. Formal sources of 
authority include legislation, Cabinet decisions and budget 
approvals. Informal sources of authority include ministers, 
central agencies, other Public sector agencies, stakeholders, 
communities, civil society and the private sector. 





Barry Harry Tarry 


Social media username used by the individual. It is a variation 
that corresponds to the individual's initials. 





capability and capacity 


Capacity describes whether there is enough of something 

(for example, staff) to achieve a certain outcome. Capability 
describes the ability to achieve a certain outcome, for 
example, whether people have the right knowledge, skills and 
technical tools. 





773 


Term 


CCTV 


Definition 


Closed-circuit television, also known as video surveillance, 
is the use of video cameras to transmit a signal to a specific 
place, on a limited set of monitors. 





central agencies 


The Department of the Prime Minister and Cabinet, Te Kawa 
Mataaho Public Service Commission (formerly the State 
Services Commission) and the Treasury. 





CET 


Central European Time. 





civil liability 


Legal responsibility for breaching an obligation recognised 
by law. 





civil society 


The space for collective action on shared interests, 
purposes and values. It is the third sector of society, along 
with government and business. It comprises civil society 
organisations and non-governmental organisations. 





classical model of 
investigation 


A model of counter-terrorism investigation that begins with 
lead information that is then investigated. 





Combined 
Counter-Terrorism 
Investigations and 
Leads Meeting 

(Joint Leads Meeting) 


A fortnightly meeting hosted by the New Zealand Security 
Intelligence Service and attended by the Department of 
Corrections, Immigration New Zealand, New Zealand Customs 
Service, New Zealand Police and (since September 2019) the 
Government Communications Security Bureau. Agencies bring 
leads they have and the other agencies can look across their 
own data holdings to provide further intelligence on the lead. 





communications 
intelligence (COMINT) 


Information derived from communications. The primary 
component of signals intelligence (SIGINT). 





community engagement 


The process of working with communities to address issues 
affecting their wellbeing. 





constitutional monarchy 


A system of government where there is a Sovereign (that 
is, monarch) who does not rule, but instead carries out 
constitutional, ceremonial and representational duties. 
The monarch, Queen Elizabeth II, is New Zealand’s head of 
state, while the prime minister is the head of government. 





774 


Term 


control orders 


Definition 


Court-imposed civil orders that place conditions or restrictions 
- such as curfews and electronic monitoring - on individuals 
who are seen to be at high risk of engaging in terrorism. 





counter-terrorism 
agencies 


New Zealand Police and the New Zealand Security Intelligence 
Service. 





counter-terrorism effort 


Counter-terrorism activities undertaken by relevant 
Public sector agencies to detect terrorists and disrupt their 
organisation, planning, preparation and attacks. 





counter-terrorism 
strategy 


A framework used to guide the activities of the Public sector 
agencies involved in the wider counter-terrorism effort. 





criminal liability 


Legal responsibility for committing an offence prohibited 
by law. 





the Crown 


The meaning of the Crown varies according to the context in 
which it is used. Generally, it describes executive government 
conducted by ministers and the relevant Public service 
agencies. It does not normally include organisations that 
have their own corporate identities, such as state-owned 
enterprises. 





cryptocurrency 


Digital or virtual currency based on a vast network of 
computers, which allows it to exist outside the control of 
governments and central banking authorities. 





cultural competency 


The ability to understand, communicate with and effectively 
interact with people across cultures, by a person aware of 
their own worldview and recognising and valuing cultural and 
social norms and differences. Culture can include ethnicity, 
nationality, age, gender identity, sexual orientation, disability, 
religious or faith affiliation. 








D2ish The Arabic acronym for the Islamic State of Iraq and the 
Levant (ISIL), also known as the Islamic State of Iraq and Syria 
(ISIS). An Islamist extremist terrorist organisation. 

dark web Part of the internet that is not visible to search engines and 


requires the use of specialist anonymising software to access. 
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Term Definition 

data aggregation Combining data from various sources and presenting it ina 
summarised format. 

deconfliction A process that enables agencies to be aware of each other’s 


activities where they are investigating the same subject of 
interest. 





digital native 


A person who has grown up in the digital age. 





Digital Subscriber Line 
(DSL) 


An internet connection that transmits digital data using 
telephone lines. 





directive leadership 


Involves a leader setting clear directions, objectives and 
expectations. 





Director-General 
of the Government 
Communications 
Security Bureau 


The chief executive of the Government Communications 
Security Bureau. This is a statutory title defined in the 
Intelligence and Security Act 2017. 





Director-General of 
Security 


The chief executive of the New Zealand Security Intelligence 
Service. This is a statutory title defined in the Intelligence and 
Security Act 2017. 





diversity 


Differences in individuals’ and groups’ traits and 
characteristics, such as ethnicity, gender identity, 
sexual orientation, age and disability. 





domestic terrorism 


Terrorism or terrorist activity that occurs in New Zealand. 
We note that this may differ from definitions used by others, 
including New Zealand’s counter-terrorism agencies. 





EFTPOS 


Acronym for electronic funds transfer at point of sale. An 
electronic payment system. 





endocrinology 


A branch of medicine that deals with the diagnosis and 
treatment of hormone problems, such as diabetes. An 
endocrinologist is a doctor who specialises in the diagnosis 
and treatment of hormone problems. 





endorsement 


Additional firearms licence privileges to possess and use 
certain types of firearms. 
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Term 


far right 


Definition 


A range of views and ideologies that are underpinned by a 
strong form of nationalism that holds that Western civilisation 
and its values are under threat form non-native people 
(particularly immigrants) and ideas (such as multiculturalism). 
Both the radical right and the extreme right-wing fit under the 
broad umbrella of the far right. 


We do not use a hyphen for far right even when it is being used 
as an adjective. 





firearms licensing process 


How a firearms licence application is processed by 
New Zealand Police. 





firearms licensing system 


The system of firearms licensing including policies and 
administration, and the regulation of semi-automatic firearms. 





fit and proper person 


A person of good character, who can be trusted to use firearms 
responsibly. 





Five Eyes 


The intelligence sharing partnership between Australia, 
Canada, New Zealand, the United Kingdom and the United 
States of America. 





full take collection 


A phrase used by the Government Communications Security 
Bureau meaning collection and storage of all communications 
data collected from a communications link, before irrelevant or 
unwanted information has been filtered out. 





full-time equivalent 


A method of calculating staffing based on hours worked. One 
full-time equivalent corresponds to 40 hours of work per week. 











groupthink The practice of thinking or making decisions as a group driven 
by the urge to conform and valuing harmony over critical 
thinking or evaluation. 

GST Goods and Services Tax. 

hijab A head covering worn in public by some Muslim women. 





hostile reconnaissance 


Gathering information about the security levels and layout of 
a building and/or the usual activities of people in the building. 
An activity sometimes carried out by a person planning a 
terrorist attack. 
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Term 


hui 


Definition 


Te reo Maori (Maori language) term for a meeting or gathering. 





human intelligence 
(HUMINT) 


Information derived from covert human sources, private 
individuals who volunteer information, face to face meetings 
with individuals, community engagement and communications. 





hussainiya 


An Arabic term for a congregation hall for Shia (a denomination 
of Islam) commemoration ceremonies. 





incendiary device 


A device designed to cause fires. 





intelligence and security 


agencies 


The Government Communications Security Bureau and the 
New Zealand Security Intelligence Service. This is a statutory 
term under the Intelligence and Security Act 2017. 





international terrorism 


Terrorism or terrorist activity that occurs outside New Zealand. 
We note that this may differ from definitions used by others, 
including New Zealand’s counter-terrorism agencies. 





Internet Protocol address 


(IP address) 


A unique number linked to each device connected toa 
computer network that uses the Internet Protocol for 
communication. 








iwi Te reo Maori (Maori language) term that refers to a tribe - a 
large group of Maori people bound together by descent from 
a common ancestor and associated with a distinct territory. 

Jumu’ah Jumu’ah is the prayer that occurs at solar noon on Fridays. 





lone actor terrorist 


A single person operating alone to plan and carry out a 
terrorist attack. 














magazine A device that contains ammunition to feed into the chamber of 
a firearm. 

Maori The indigenous population of New Zealand. 

masajid An Arabic term for more than two masjid. 

masjid An Arabic term for a mosque, the Muslim place of worship. 


In Arabic, masjid literally translates to “place of prostration 
(in prayer)”. 
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Term 


masjidain 


Definition 


An Arabic term for two masjid. 





Masjid an-Nur 


An Arabic term for the an-Nur Mosque. 





massively multiplayer 
online role-playing games 


A combination of role-playing video games and massively 
multiplayer online games, in which a large number of players 
interact with each other in a virtual world. 





member of Police 


An employee of New Zealand Police, including a person 
seconded to New Zealand Police. 








meme An image, video or piece of text, typically humorous in nature 
that is spread via the internet, often through social media. 
metadata Information about other data, such as the date the data was 


created, who created it, and who can access it. 





military style semi- 
automatic 


A semi-automatic firearm fitted with: 


- amagazine capable of holding more than 15 .22 calibre 
rimfire cartridges or more than seven cartridges of any 
other kind; and/or 


- amilitary pattern free-standing pistol grip; and/or 


- afolding or telescopic butt; and/or 
- bayonet lugs; and/or 


- ora flash suppressor. 





mobilisation 


The process by which a radicalised person moves from an 
extremist intent to preparatory steps to engage in terrorist 
activity, such as researching potential targets, training or 
increased use of concealment behaviour. 





National Intelligence 
Application (NIA) 


A database used by New Zealand Police to manage information 
relevant to operational policing. 





near-relative referee 


A family member of a firearms licence applicant who can attest 
to the applicant being a fit and proper person. 
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Term 


New Zealand Intelligence 
Community 


Definition 


The Government Communications Security Bureau, the 
New Zealand Security Intelligence Service and the National 
Security Group of the Department of the Prime Minister and 
Cabinet (including the National Assessments Bureau). 





nexus 


A connection. 





Officials’ Committee for 
Domestic and External 
Security Coordination 
(ODESC) 


The primary governance board overseeing New Zealand’s 
national security and resilience. Its main role is the 
identification and governance of national security risk. 

It is chaired by the Chief Executive of the Department of the 
Prime Minister and Cabinet. 





operational security 


Awareness and minimisation of behaviours that might attract 
attention from Public sector agencies. 





ophthalmology 


A branch of medicine that deals with the diagnosis and 
treatment of eye diseases and vision problems, such as 
cataracts. An ophthalmologist is a doctor who specialises in 
the diagnosis and treatment (including surgery) of eye diseases 
and vision problems. 





Oslo terrorist 


An individual born and raised in Oslo, Norway who committed 
a terrorist attack in Oslo and on Utgya Island, Norway on 
22 July 2011. 





Pasifika 


A collective term for people of Pacific Island descent. 





Performance 
Improvement Framework 


A tool, developed by the central agencies, for Public sector 
agencies and their chief executives to improve the performance 
of a Public sector agency. 





Performance 
Improvement Framework 
review 


A review of a Public sector agency completed by independent 
reviewers using the Performance Improvement Framework. 





polarisation 


Increasing divergence between individuals and groups holding 
different views. 
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Term 


Public sector agencies 
involved in the 
counter-terrorism effort 


Definition 


The Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service. 





Public sector agency 


In general, an organisation that works for the government 
of New Zealand. 


In this report, “Public sector agencies” means the 217 
organisations listed in the appendix. 





Qur’an 


The central religious text of Islam. 





radicalisation 


The process through which people develop commitment to a 
particular extremist ideology. People can radicalise to violence 
when they come to see violence as a feasible tool to address 
their grievances. 





radical right 


Ideologies and beliefs that form part of the far right. Those on 
the radical right generally use democratic means to achieve 
their aims and do not openly endorse the use of violence as a 
legitimate tool to achieve their aims. 





Recovery 


One of the 4Rs. Recovery activities are focused on bringing 
about the immediate, medium-term and long-term recovery of 
individuals and communities after a national security event. 





Registrar 


A doctor working in a hospital who is training in a specialised 
field of medicine. 





right-wing extremism 


Ideologies and beliefs that form part of the far right. Those in 
the extreme right-wing often believe that democracy should 
be replaced, and they see non-democratic means, such as 
violence, as legitimate tools to achieve their aims. 


We use a hyphen for right-wing even when it is not being used 
as an adjective. 





risk 


The likelihood that a threat will occur, and the seriousness of 
consequences if it does. The more likely the threat, and the 
more severe the likely consequences, the greater the risk. 
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Term Definition 

sanitisation Removing sensitive information (often by rewording language) 
from a document so that it can be more widely distributed. 

scabbard A sheath or holster for a knife. 





Secure Digital card 
(SD card) 


A digital storage card used in portable electronic devices. 





securitisation 


When a group of people or communities are seen primarily as a 
potential security threat. 





semi-automatic 


A firearm that is capable of, with each pull of the trigger: 
- firing a cartridge and ejecting its case; and 


- chambering another cartridge. 





sensitive information 


Information that, if disclosed, would be likely to cause 

damage to the security or defence of New Zealand, or to the 
New Zealand government’s international relations, or prejudice 
the maintenance of the law or endanger the safety of a person. 





shuhada 


An Arabic term for the plural martyr. The term shuhada is used 
in this report to refer to people who died as martyrs as a result 
of the terrorist attack on 15 March 2019. 





signals intelligence 
(SIGINT) 


Information derived from electronic communications (signals 
such as phone calls and emails), the primary component of 
which is communications intelligence (COMINT). 





social cohesion 


A socially cohesive society is one in which all individuals 
and groups have a sense of belonging, social inclusion, 
participation, recognition and legitimacy. 





social inclusion 


The process of improving how individuals and groups 
participate in and contribute to society on their own terms. 





social licence 


The ability of a business, organisation or government to do its 
work because it has the ongoing approval or acceptance of 
society to do so. 





solar noon 


The time of day when the sun appears to have reached its 
highest point in the sky. 
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Term 


structural discrimination 


Definition 


Where an entire network of rules and practices disadvantages 
less empowered groups while serving at the same time to 
advantage the dominant group. 





sworn officers 


New Zealand Police employees who have taken the constable’s 
oath under the Policing Act 2008. 





tangata whenua 


Te reo Maori (Maori language) term for Maori, which means 
“people of the land”. 





target hardening 


A term used by law enforcement, security and military 
personnel to refer to the strengthening of a building or 
installation in order to protect it in the event of an attack. This 
can include security measures like installing closed-circuit 
television (CCTV) and alarms. 





Tauiwi 


A person in New Zealand of non-Maori descent. 





terrorist cell 


A small semi-independent or entirely separate unit of a larger 
terrorist organisation. 





Te Tiriti o Waitangi 


Te reo Maori (Maori language) name for the Treaty of Waitangi 
- New Zealand’s founding document signed by Maori and the 
British Crown in 1840. 





threat 


A source of potential damage or danger. 





threatscape 


The threat environment. 





Tor browser 


Software that allows users to surf the web anonymously by 
concealing the user’s location as well as what they are looking 
at online. It can also be used to access the dark web. 





tradecraft 


Operational (often secret) practices. 





trolling 


The deliberate act of making comments, usually on internet 
forums, to provoke a reaction from readers. 





unrelated referee 


A person unrelated to a firearms applicant, such as a friend or 
an employer, who can attest to the applicant being a fit and 
proper person. 
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Term 


Virtual Private Network 
(VPN) 


Definition 


Software that allows the user to create a secure connection to 
another server over the internet. Once connected, the user can 
browse the internet using that server. In doing so, the user is 
provided with an Internet Protocol (IP) address associated with 
the different server, which hides the user’s location. 





Vote 


A grouping of Parliamentary appropriations that authorise 
responsible Ministers to incur expenses or capital 
expenditure. Each Vote is administered by one Public service 
department. 





Waitangi Tribunal 


A tribunal that considers contemporary and historical breaches 
of Te Tiriti o Waitangi. 





whanau 


Te reo Maori (Maori language) term for family. 





wider counter-terrorism 
effort 


Public sector agencies that contribute to or support the counter- 
terrorism effort, including: 


- the agencies involved in the counter-terrorism effort 
(the Department of the Prime Minister and Cabinet, the 
Government Communications Security Bureau, Immigration 
New Zealand, New Zealand Customs Service, New Zealand 
Police and the New Zealand Security Intelligence Service); and 


- agencies who can play a role in supporting counter-terrorism 
activities where it overlaps with their functions, including 
Public sector agencies (such as the Department of Internal 
Affairs, the Ministry of Education and the Ministry of Foreign 
Affairs and Trade). 
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Appendix: Public sector agencies 


Public service departments 


Crown Law Office 


— 


Department of Conservation 
Department of Corrections 
Department of Internal Affairs 
Department of the Prime Minister and Cabinet 
Education Review Office 
Government Communications Security Bureau 
Inland Revenue Department 
Land Information New Zealand 
. Ministry of Business, Innovation and Employment 
. Ministry for Culture and Heritage 
. Ministry of Defence 
. Ministry of Education 
. Ministry for the Environment 


OoOnoN An AWD 


ddd 
B@®PBPb BO 


. Ministry of Foreign Affairs and Trade 

. Ministry of Health 

. Ministry of Housing and Urban Development 
. Ministry of Justice 

. Ministry for Pacific Peoples 


Oo =] + + + += 
0 O aN On 


. Ministry for Primary Industries 
. Ministry of Social Development 
. Ministry of Transport 


DO NM 
py = 


NO 
w 


. Ministry for Women 
. New Zealand Customs Service 


NO 
B 


. New Zealand Security Intelligence Service 

. Oranga Tamariki - Ministry for Children 

. Serious Fraud Office 

. Statistics New Zealand 

. Te Kahui Whakamana Rua Tekau ma Iwa - Pike River Recovery Agency 


NON NY NY NY N 
Oo onan 


. Te Kawa Mataaho - Public Service Commission 
. Te Puni Kokiri - Ministry of Maori Development 
32. The Treasury 


w ww 
= Oo 


Departmental agencies 
33. Social Wellbeing Agency 
34. Te Arawhiti - Office for Maori Crown Relations 
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Non-Public service departments 


In the State services 

35. New Zealand Defence Force 
36. New Zealand Police 

37. Parliamentary Counsel Office 


In the wider Public sector 


38. Office of the Clerk of the House of Representatives 
39. Parliamentary Service 


Crown entities 


Crown agents 

40. Accident Compensation Corporation 

41. Auckland District Health Board 

42. Bay of Plenty District Health Board 

43. Callaghan Innovation 

44. Canterbury District Health Board 

45. Capital & Coast District Health Board 
46. Civil Aviation Authority of New Zealand 
47. Counties Manukau District Health Board 
48. Earthquake Commission 

49. Education New Zealand 

50. Energy Efficiency and Conservation Authority 
51. Environmental Protection Authority 

52. Fire and Emergency New Zealand 

53. Hawke’s Bay District Health Board 

54. Health Promotion Agency 

55. Health Quality and Safety Commission 
56. Health Research Council of New Zealand 
57. Hutt Valley District Health Board 

58. Kainga Ora - Homes and Communities 
59. Lakes District Health Board 

60. Maritime New Zealand 

61. MidCentral District Health Board 

62. Nelson Marlborough District Health Board 
63. New Zealand Antarctic Institute 


787 


64. 


65. 
66. 
67. 
68. 
69. 
70. 
71. 
72. 
73. 
74. 
75. 
76. 
77. 
78. 
79. 


80. 


81. 
82. 
83. 
84. 
85. 


New Zealand Blood Service 

New Zealand Qualifications Authority 
New Zealand Tourism Board 

New Zealand Trade and Enterprise 
New Zealand Transport Agency 

New Zealand Walking Access Commission 
Northland District Health Board 
Pharmaceutical Management Agency 
Real Estate Authority 

Social Workers Registration Board 
South Canterbury District Health Board 
Southern District Health Board 

Sport and Recreation New Zealand 
Tairawhiti District Health Board 
Taranaki District Health Board 
Tertiary Education Commission 
Waikato District Health Board 
Wairarapa District Health Board 
Waitemata District Health Board 
West Coast District Health Board 
Whanganui District Health Board 
WorkSafe New Zealand 


Autonomous Crown entities 


86. 


87. 
88. 
89. 


gO. 


91. 
92. 
93. 


94. 


95. 
96. 
97. 
98. 
99. 


Annuitas Management Limited 

Arts Council of New Zealand Toi Aotearoa 
Commission for Financial Capability 

Heritage New Zealand Pouhere Taonga 
International Accreditation New Zealand 

Museum of New Zealand Te Papa Tongarewa Board 
New Zealand Artificial Limb Service 

New Zealand Film Commission 

New Zealand Lotteries Commission 

New Zealand on Air 

New Zealand Superannuation Fund 

New Zealand Symphony Orchestra 

Public Trust 

Te Mangai Paho - Maori Broadcasting Funding Agency 


100. Te Taura Whiri | Te Reo Maori - Maori Language Commission 
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Independent Crown entities 


101. 

102. 
103. 
104. 
105. 
106. 
107. 

108. 
109. 
110. 


111. 
112. 
113. 
114. 
115. 
116. 
117. 


Broadcasting Standards Authority 
Children’s Commissioner 

Commerce Commission 

Drug Free Sport New Zealand 

Electoral Commission 

Electricity Authority 

External Reporting Board 

Financial Markets Authority 

Health and Disability Commissioner 
Human Rights Commission 

Independent Police Conduct Authority 
Law Commission 

New Zealand Productivity Commission 
Office of Film and Literature Classification 
Privacy Commissioner 

Takeovers Panel 

Transport Accident Investigation Commission 


Crown research institutes 


118. 
119. 


120. 


12 
23; 
129. 


124. 


AgResearch Limited 

GNS Science 

Institute of Environmental Science and Research Limited 
Manaaki Whenua Landcare Research New Zealand Limited 
National Institute of Water and Atmospheric Research Limited 
New Zealand Forest Research Institute Limited 

The New Zealand Institute for Plant and Food Research Limited 


Other companies 


125; 


126. 


127; 
128. 


Crown Irrigation Investments Limited 
New Zealand Growth Capital Partners 
Radio New Zealand Limited 
Television New Zealand Limited 


Crown entity subsidiaries 


1239; 
130. 


131. 


High Performance Sport New Zealand 
Hobsonville Land Company 
Telarc SAI Limited 
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Crown entity subsidiaries of the New Zealand Institute of Skills and Technology 
132. Ara Institute of Canterbury 

133. Eastern Institute of Technology 

134. Manukau Institute of Technology 

135. Nelson Marlborough Institute of Technology 
136. Northland Polytechnic 

137. Open Polytechnic of New Zealand 

138. Otago Polytechnic 

139. Southern Institute of Technology 

140. Tai Poutini Polytechnic 

141. Toi Ohomai Institute of Technology 

142. Unitec Institute of Technology 

143. Universal College of Learning 

144. Waikato Institute of Technology 

145. Western Institute of Technology 

146. Whitireia Community Polytechnic 


Tertiary education institutions 

147. Auckland University of Technology 
148. Lincoln University 

149. Massey University 

150. Te Wananga o Aotearoa (Te Awamutu) 
151. Te Wananga o Raukawa (Otaki) 

152. Te Whare Wananga o Awanuiarangi (Whakatane) 
153. University of Auckland 

154. University of Canterbury 

155. University of Otago 

156. University of Waikato 

157. Victoria University of Wellington 


Public Finance Act Schedule 4 organisations 


Fish and game councils 

158. Auckland/Waikato Fish and Game Council 
159. Central South Island Fish and Game Council 
160. Eastern region Fish and Game Council 

161. Hawke’s Bay Fish and Game Council 
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162. Nelson/Marlborough Fish and Game Council 
163. New Zealand Fish and Game Council 

164. New Zealand Game Animal Council 

165. North Canterbury Fish and Game Council 
166. Northland Fish and Game Council 

167. Otago Fish and Game Council 

168. Southland Fish and Game Council 

169. Taranaki Fish and Game Council 

170. Wellington Fish and Game Council 

171. West Coast Fish and Game Council 


Trusts 

172. Agricultural and Marketing Research and Development Trust 
173. Asia New Zealand Foundation 

174. National Pacific Radio Trust 

175. Ngai Tahu Ancillary Claims Trust (inactive) 

176. Pacific Co-operation Foundation 

177. Pacific Island Business Development Trust 

178. Te Ariki Trust 


Other game animal council 

179. New Zealand Game Bird Habitat Trust Board 
180. New Zealand Lottery Grants Board 

181. Te Tumu Paeroa 


Public Finance Act Schedule 4A companies 


182. City Rail Link Limited 

183. Crown Asset Management Limited 

184. Crown Infrastructure Partners Limited 

185. Education Payroll Limited 

186. Otakaro Limited 

187. Predator Free 2050 Limited 

188. Research and Education Advanced Network New Zealand Limited 
189. Southern Response Earthquake Services Limited 

190. Tamaki Redevelopment Company Limited 

191. The Network for Learning Limited 
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Offices of Parliament 


192. Office of the Ombudsmen 
193. The Controller and Auditor-General 
194. The Parliamentary Commissioner for the Environment 


State-owned enterprises 


195. AsureQuality Limited 

196. Electricity Corporation of New Zealand Limited 
197. KiwiRail Holdings Limited 

198. Kordia Group Limited 

199. Meteorological Service of New Zealand Limited 
200. New Zealand Post Limited 

201. New Zealand Railways Corporation 

202. Orillion 

203. Pamu - Landcorp Farming Limited 

204. Quotable Value Limited 

205. Transpower New Zealand Limited 


Mixed ownership model companies 


206. Genesis Energy 
207. Mercury NZ Limited 
208. Meridian Energy Limited 


Other 


209. Inspector-General of Intelligence and Security 
210. Maori Television 

211. New Zealand Council for Educational Research 
212. New Zealand Food Innovation Network 

213. Queen Elizabeth || National Trust 

214. Regenerate Christchurch 

215. Remuneration Authority 

216. Reserve Bank 

217. Te Matawai 
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